Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
-
submitted
08-07-2024 03:39
General
-
Target
2adae0a577c85a86623f3ba7b64f1df9_JaffaCakes118.exe
-
Size
345KB
-
MD5
2adae0a577c85a86623f3ba7b64f1df9
-
SHA1
5ab2dea0ca031f0ebaa070c6fbffb55497fea435
-
SHA256
cab13cec2abc8419bdf918c14f483f23b51b95bdc39185436318b5b4959b9ba6
-
SHA512
c1fce8b8881b467e48adce90548be937272d3e8e7f42bbe16ed15a33adfe7865fde33cf6fcd0c132fd7ac580c57bd18042657d5274863849d66a110d8df09fbb
-
SSDEEP
6144:DD1TsCHwtdOt+VaI7ztYx1/YnZCSc72aqGLPrRySHh/h11xX+neM6cb:DR4CQtot+VNZYxxyHcKfGLPr8SHh/lxG
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in System32 directory 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 12 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2adae0a577c85a86623f3ba7b64f1df9_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\2adae0a577c85a86623f3ba7b64f1df9_JaffaCakes118.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\SysWOW64\llfsvicsl.exeC:\Windows\SysWOW64\llfsvicsl.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
345KB
MD52adae0a577c85a86623f3ba7b64f1df9
SHA15ab2dea0ca031f0ebaa070c6fbffb55497fea435
SHA256cab13cec2abc8419bdf918c14f483f23b51b95bdc39185436318b5b4959b9ba6
SHA512c1fce8b8881b467e48adce90548be937272d3e8e7f42bbe16ed15a33adfe7865fde33cf6fcd0c132fd7ac580c57bd18042657d5274863849d66a110d8df09fbb
-
Filesize
728KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
728KB
-
Filesize
4KB
-
Filesize
728KB