d221ceebbecfda7f8bd2a367ff03202c7046fa3c1a558b52d11eb58a216b87fb

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
09/07/2024, 10:06

Target

2ff15dd047cc94a4c53e15248d16a3ae_JaffaCakes118.dll
Size

123KB
MD5

2ff15dd047cc94a4c53e15248d16a3ae
SHA1

17b391338402aeda1e1df7d7505d3f1aedbe3fbe
SHA256

d221ceebbecfda7f8bd2a367ff03202c7046fa3c1a558b52d11eb58a216b87fb
SHA512

cbfbe518cbb78563af592502b1cf1011828c9e03aaa78381b11fb9e73c476b32954f7d2685192fc8d04640bc9f65330b04b1e3e56445e91e3f8c3fb5c4ef18be
SSDEEP

3072:WoUJQ+XG3JiIBs2k6ZSHuDY4x/QfBpR5Vdum:VUJQ+XG3JiSsTCSHuDBYJpfVY

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2220 wrote to memory of 2252	2220	rundll32.exe	30
PID 2220 wrote to memory of 2252	2220	rundll32.exe	30
PID 2220 wrote to memory of 2252	2220	rundll32.exe	30
PID 2220 wrote to memory of 2252	2220	rundll32.exe	30
PID 2220 wrote to memory of 2252	2220	rundll32.exe	30
PID 2220 wrote to memory of 2252	2220	rundll32.exe	30
PID 2220 wrote to memory of 2252	2220	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2ff15dd047cc94a4c53e15248d16a3ae_JaffaCakes118.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2220
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\2ff15dd047cc94a4c53e15248d16a3ae_JaffaCakes118.dll,#1
  2⤵
  PID:2252

memory/2252-5-0x0000000010000000-0x0000000010046000-memory.dmp

Filesize
280KB

Download
memory/2252-4-0x0000000010004000-0x0000000010005000-memory.dmp

Filesize
4KB

Download
memory/2252-3-0x0000000010000000-0x0000000010046000-memory.dmp

Filesize
280KB

Download
memory/2252-2-0x0000000010000000-0x0000000010046000-memory.dmp

Filesize
280KB

Download
memory/2252-1-0x0000000010000000-0x0000000010046000-memory.dmp

Filesize
280KB

Download
memory/2252-0-0x0000000010000000-0x0000000010046000-memory.dmp

Filesize
280KB

Download
memory/2252-6-0x0000000010000000-0x0000000010046000-memory.dmp

Filesize
280KB

Download