Analysis

  • max time kernel
    92s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/07/2024, 23:18

General

  • Target

    29911696fb02defde43b5a5d63d632ef_JaffaCakes118.exe

  • Size

    257KB

  • MD5

    29911696fb02defde43b5a5d63d632ef

  • SHA1

    035b62c1827da301c0cba440e022699d8caf754d

  • SHA256

    117cd90887c5859addffb5e30c24e2330ac0d1a99cede25a2d7006ac0448b2e8

  • SHA512

    80efc3b0c94c49b0c4835789ef0555eb8a225e6580d9b1ede210521907143bdd637a58bda3e233206190b419c00370ca725b5ec8275ea110f34c08d11eafb681

  • SSDEEP

    6144:23tBVgceTKJr7IDmVONuAgH+8RdtYL9o2b1ZC4wfHINUwBfdpkd1D:23tDgceZDmVOkHRYL9o2bG4wfHeUwBf4

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\29911696fb02defde43b5a5d63d632ef_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\29911696fb02defde43b5a5d63d632ef_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    PID:768

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\3B04254A\_Setup.dll

    Filesize

    130KB

    MD5

    4b254e3e77b750870d2778c9a6bde57c

    SHA1

    5efada7199a94d7db83f8899b8b3ac6760b220ef

    SHA256

    71d4a234ff22d9b4e6b682440970a61d018625d82e63a31351f4520245e826bb

    SHA512

    229f37e63d987cbd503ad03487727e592d0872759fb8ff9e77175bd56fa36afb006e62c69219241bc6a6b63153c377046cad314614afed7c036eac693a786e82

  • C:\Users\Admin\AppData\Local\Temp\3B04254A\_Setupx.dll

    Filesize

    22KB

    MD5

    56640a54d5c551889c234b4094a06f89

    SHA1

    3087f00d056ada8055015f832832a0b6b82225ac

    SHA256

    dad8a62f875bdbe0d0da8dc65c8e13e6d14fc6a3fe293230382e1acf629bed25

    SHA512

    d521bd45a04506dfe269e2ab6c47d4a1dcdb037be4e20750af2aaa52715cf750df20b9ce67a99efb26169362c4dff03921cf7c70e70e86352e552849570ac192

  • C:\Users\Admin\AppData\Local\Temp\Tsu-0300.dll

    Filesize

    249KB

    MD5

    c147e4237b78ecd1804e8ed89aec3c5c

    SHA1

    74f7a58bc08794ec138205b18640ef487cea2d5d

    SHA256

    e0798d55f6f58944c03c739416b80794fc7b896a58f360d56ce40c84634c8511

    SHA512

    02f8730a8169f6029e80e5d79c1656e3d73838cde16ee137d7b764f5c725e8888f4ea81023c97e036b4fc262c679efe1fef66290e9028b631ca5b73efa4561a0