Overview

overview

7

Static

static

7

2f0dbd3f1e...18.exe

windows7-x64

3

2f0dbd3f1e...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    93s
  • max time network
    96s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/07/2024, 04:56

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    2f0dbd3f1ea3ee00de62c7c7f33ab8ca_JaffaCakes118.exe

  • Size

    113KB

  • MD5

    2f0dbd3f1ea3ee00de62c7c7f33ab8ca

  • SHA1

    5ef92dc158579313120829097f70e00139e63b81

  • SHA256

    5468c2d4f5208e2d36f2d1f9697b2ad62a3190b82d1cd0a43319e7ab5eabf720

  • SHA512

    2ac107d3277519df6c7e9588a43439486bee07a18e36d100715e482395ea568f9cade19d190429dda38681df0dc010f67be19aa2116d67f0e1f234ac0572660c

  • SSDEEP

    3072:J4c4n6tm8n1lQVfNroFEUrSvOXlC/qxaW+Pv:yc4n6ttcNrsl9xaW+X

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2f0dbd3f1ea3ee00de62c7c7f33ab8ca_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\2f0dbd3f1ea3ee00de62c7c7f33ab8ca_JaffaCakes118.exe"
    1⤵
      PID:4528
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4528 -s 264
        2⤵
        • Program crash
        PID:3200
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4528 -ip 4528
      1⤵
        PID:4892

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/4528-0-0x0000000000400000-0x0000000000464000-memory.dmp

              Filesize

              400KB

              Download

            • memory/4528-1-0x0000000000400000-0x0000000000464000-memory.dmp

              Filesize

              400KB

              Download