be279816454349eb89f4b747ec7c7c21adbe83e0b9bfb452d9e8f81f6a5f80aa | Triage

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
06/07/2024, 18:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

29307f9030cafaf0f2a8a5868073297b_JaffaCakes118.exe
Size

2KB
MD5

29307f9030cafaf0f2a8a5868073297b
SHA1

23a0fb4a049d51175d7758063c77c032668f30c7
SHA256

be279816454349eb89f4b747ec7c7c21adbe83e0b9bfb452d9e8f81f6a5f80aa
SHA512

e8b87ed9bd0da753b8bb5e6b8f845bbc156767fecae8cd1dd2be937d7af9a4cf1e856be54d34e520188786092ecb0fc0cf359568411051cbfffcd7faed8d24c4

Score

5^/10

Malware Config

Signatures

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2556 set thread context of 2756	2556	29307f9030cafaf0f2a8a5868073297b_JaffaCakes118.exe	28

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 2556 wrote to memory of 2756	2556	29307f9030cafaf0f2a8a5868073297b_JaffaCakes118.exe	28
PID 2556 wrote to memory of 2756	2556	29307f9030cafaf0f2a8a5868073297b_JaffaCakes118.exe	28
PID 2556 wrote to memory of 2756	2556	29307f9030cafaf0f2a8a5868073297b_JaffaCakes118.exe	28
PID 2556 wrote to memory of 2756	2556	29307f9030cafaf0f2a8a5868073297b_JaffaCakes118.exe	28
PID 2556 wrote to memory of 2756	2556	29307f9030cafaf0f2a8a5868073297b_JaffaCakes118.exe	28

C:\Users\Admin\AppData\Local\Temp\29307f9030cafaf0f2a8a5868073297b_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\29307f9030cafaf0f2a8a5868073297b_JaffaCakes118.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:2556
- C:\Windows\SysWOW64\svchost.exe
  svchost.exe
  2⤵
  PID:2756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2556-2-0x0000000013040000-0x0000000013046000-memory.dmp

Filesize
24KB

Download
memory/2756-0-0x0000000013040000-0x0000000013046000-memory.dmp

Filesize
24KB

Download
memory/2756-3-0x0000000013040000-0x0000000013046000-memory.dmp

Filesize
24KB

Download