Overview

overview

6

Static

static

3

27a45bca53...18.exe

windows7-x64

6

27a45bca53...18.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    94s
  • max time network
    102s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06-07-2024 06:58

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    27a45bca533feacfc99f20fd144fb057_JaffaCakes118.exe

  • Size

    416KB

  • MD5

    27a45bca533feacfc99f20fd144fb057

  • SHA1

    9219913fc1a5d4e6b0bfbc9e1cbf52b040cd0cec

  • SHA256

    d4a60372b362ef0805ae9c1195485bfba1c8f372cb6ccfef8913c4052fee9b06

  • SHA512

    53f7324e1f0223d424d56a3f1e89686874aee14849587a045d444139f96dfab2df7227eef4c8b40b035d8ca0ef7e1eac07a94723c3b091e4b1b6dff0e1e030ee

  • SSDEEP

    3072:bdIHbRsE+N+gW2Konb2sWeCjh0E1ePpo9ubJiJBksJk/QzYi8xWNI5:EqE+pksme+h0wCeuyM485O

Score
6/10
persistence

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Suspicious behavior: RenamesItself 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\27a45bca533feacfc99f20fd144fb057_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\27a45bca533feacfc99f20fd144fb057_JaffaCakes118.exe"
    1⤵
    • Adds Run key to start application
    • Suspicious behavior: RenamesItself
    PID:4360

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4360-0-0x0000000000400000-0x0000000000471000-memory.dmp

    Filesize

    452KB

    Download