Analysis

  • max time kernel
    148s
  • max time network
    159s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240708-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240708-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/07/2024, 11:06

General

  • Target

    2c16dd713e5e018d2234eef545c3efd3_JaffaCakes118.exe

  • Size

    791KB

  • MD5

    2c16dd713e5e018d2234eef545c3efd3

  • SHA1

    b79ba3bc3a01fe9419c7b38517db26ca43ba7a68

  • SHA256

    6ff857713d1805e31ef18ce1a42e772f6f7d4b317edcb4619f66e14f69abf3a4

  • SHA512

    8e5d3a3e4ae1159fed38b82c3d0ae747ab6d48a66c31c08ca9abddf5b01b49836fd6c89a1af2006c46b04d68663a07e9e676f394e1965b1c111314b7feab33d1

  • SSDEEP

    12288:+c30wwsDyLHNVrPknzpTIHnnmIxBRyHbYkObS0dMwvnFHXUQeb1xmkPEc+7KQKWl:fnryZVInUnKHSSTwPF3UQyWc+7Kvnm

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2c16dd713e5e018d2234eef545c3efd3_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\2c16dd713e5e018d2234eef545c3efd3_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2060

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2060-0-0x0000000000400000-0x000000000056B000-memory.dmp

    Filesize

    1.4MB

  • memory/2060-1-0x00000000022F0000-0x000000000233B000-memory.dmp

    Filesize

    300KB

  • memory/2060-2-0x00000000022F0000-0x000000000233B000-memory.dmp

    Filesize

    300KB

  • memory/2060-5-0x0000000000740000-0x0000000000749000-memory.dmp

    Filesize

    36KB

  • memory/2060-4-0x0000000002340000-0x0000000002359000-memory.dmp

    Filesize

    100KB

  • memory/2060-3-0x0000000000730000-0x0000000000731000-memory.dmp

    Filesize

    4KB

  • memory/2060-6-0x0000000000400000-0x000000000056B000-memory.dmp

    Filesize

    1.4MB

  • memory/2060-8-0x0000000000400000-0x000000000056B000-memory.dmp

    Filesize

    1.4MB

  • memory/2060-10-0x0000000000401000-0x0000000000403000-memory.dmp

    Filesize

    8KB

  • memory/2060-9-0x0000000000400000-0x000000000056B000-memory.dmp

    Filesize

    1.4MB

  • memory/2060-11-0x0000000000400000-0x000000000056B000-memory.dmp

    Filesize

    1.4MB

  • memory/2060-13-0x0000000000400000-0x000000000056B000-memory.dmp

    Filesize

    1.4MB

  • memory/2060-14-0x00000000022F0000-0x000000000233B000-memory.dmp

    Filesize

    300KB