Analysis

  • max time kernel
    93s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09-07-2024 08:18

General

  • Target

    2f9dd880d2971c3c70a510f3cdd94b7c_JaffaCakes118.dll

  • Size

    588KB

  • MD5

    2f9dd880d2971c3c70a510f3cdd94b7c

  • SHA1

    a2820027529fb0ac43251da33e0fd7bc975945bc

  • SHA256

    698b72336169db3151308e2860c1335d6bb39d1dc80b8a79502357a61724daec

  • SHA512

    bb0d0e88943864f79ed0c6ebf9ce8b99c50f872cfb06585da0d0160819233033794faa3b375170f04cdae8c8196e265fe9c99775288cac81d4b47a8b0333e259

  • SSDEEP

    12288:h5CMcrKjHG7CS6+Wv6gsF6RsJDkxjIq7nCQVckcDrFAGTAcl4+AFYOvAVT2b8:h5C1iHG7CS6+Wv6gyXJaZP2zhHTAP+AA

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\2f9dd880d2971c3c70a510f3cdd94b7c_JaffaCakes118.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4316
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\2f9dd880d2971c3c70a510f3cdd94b7c_JaffaCakes118.dll,#1
      2⤵
        PID:4856

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads