Overview

overview

7

Static

static

3

2bde969ec6...18.exe

windows7-x64

7

2bde969ec6...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    119s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    08-07-2024 09:47

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2bde969ec62b8f0349d894a59af78cea_JaffaCakes118.exe

  • Size

    270KB

  • MD5

    2bde969ec62b8f0349d894a59af78cea

  • SHA1

    658fa1d8ef4f155910c88046b762bd8ea0b2dbd7

  • SHA256

    e852e7f8cd84f9dff014050c7dd5067ad7474ae1a2ec4417d652f6e02f59ee8b

  • SHA512

    200f4365fc8d5cd736343d0e33ed5fe13954bf88a781855903d23c71019ff50f5231f7df4b5083954f3e9aa091f5300281ed30cd90fa2e1ea2e8bf5e8c187c8f

  • SSDEEP

    6144:QlIKFeyvjeaQmfEHFafEgaQn3txN4ZOMa2P9fT6aVc5mEE3B:Ql3vKabES5aQdMcMX9b6a+cEY

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2bde969ec62b8f0349d894a59af78cea_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\2bde969ec62b8f0349d894a59af78cea_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\Tsu-07F4.dll
    Filesize

    249KB

    MD5

    b2ff615df5dc0ee7df0a8fc91af546e1

    SHA1

    972f266ff94365a3be690a82813654e61f205ece

    SHA256

    0972efe30eaa01a90145429a5c76e93a97b2152eef66ea344ef4031a7cf54d14

    SHA512

    fc656b64816013bec7ab6db802374fe9bdee1f9997febc04ff5f27ade7d2560c1c3dc03e9ee0898082dc83c4cbf3fb19e5f7835137cfc62443a037112fb1f31f

    Download Submit

  • \Users\Admin\AppData\Local\Temp\{83D80E8E-F286-98F0-7A1B-BAA4583B2C78}\_Setup.dll
    Filesize

    164KB

    MD5

    72d1d614fb50176a27e5579a777cf850

    SHA1

    d29ca945708479c4bd0b04d35dc7846381010102

    SHA256

    f9a88d5e6d2d8ad4c848a3f8d0a2e111e341d1b20fa7f24a7ebb29661576225d

    SHA512

    3872f6bc283fbe76796e0003e3aaee05c49a617e54ab897d2f923b0613e59fa0af72fcb77e1aae9aacb1f5ec4dabfab797687f3bdda1883c730e4b22f0be55e2

    Download Submit

  • \Users\Admin\AppData\Local\Temp\{83D80E8E-F286-98F0-7A1B-BAA4583B2C78}\_Setupx.dll
    Filesize

    20KB

    MD5

    eb5247e0900659981d38c48bdf5e70ae

    SHA1

    7353bf24e4e749b59b006891e93b608b5470030f

    SHA256

    532e3bfe48845737587336c98684800282e102cd491548c34562f48fd4e95c52

    SHA512

    c4bfae48e95607d01cfe0a16798bdbf3be1c724b83453e5b2b5cc48dc5bde13c9de71852b6d570bc702c48a50f5c5e6d2bb091a853a263e809578dd58eab29dd

    Download Submit