Analysis

  • max time kernel
    147s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09-07-2024 06:50

General

  • Target

    2f5c8c61da69d4e79eaaae7f8ce4b310_JaffaCakes118.exe

  • Size

    172KB

  • MD5

    2f5c8c61da69d4e79eaaae7f8ce4b310

  • SHA1

    134555d80bacee7aaf069035619e27e5d99ea096

  • SHA256

    84f7ebfa56315c623e2538751f0b89984a6957d095eedb622a7372538e2f526e

  • SHA512

    7ca97db6e958dacccad0d308152f41a45c0c9a3e4b17ac816f6aff465f0b5cb96ad225b5c95956bcb1ae2c0dd0b90306c2835685f466047522ae43f7564f8234

  • SSDEEP

    3072:Nl5/xGfC/zGDnxqDK2sx03KFeIvRBwmWeRtSbe:RxUxh2sx0anRBDWe+be

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Drops file in System32 directory 1 IoCs
  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2f5c8c61da69d4e79eaaae7f8ce4b310_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\2f5c8c61da69d4e79eaaae7f8ce4b310_JaffaCakes118.exe"
    1⤵
    • Drops file in Windows directory
    PID:2612
  • C:\Windows\lsass.exe
    C:\Windows\lsass.exe -start
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    PID:3384
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=3972,i,18261153038209191383,10347744459236715365,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:8
    1⤵
      PID:4136

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Windows\lsass.exe

      Filesize

      172KB

      MD5

      2f5c8c61da69d4e79eaaae7f8ce4b310

      SHA1

      134555d80bacee7aaf069035619e27e5d99ea096

      SHA256

      84f7ebfa56315c623e2538751f0b89984a6957d095eedb622a7372538e2f526e

      SHA512

      7ca97db6e958dacccad0d308152f41a45c0c9a3e4b17ac816f6aff465f0b5cb96ad225b5c95956bcb1ae2c0dd0b90306c2835685f466047522ae43f7564f8234