Analysis
-
max time kernel
32s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
11-07-2024 06:31
General
-
Target
380dc38441dcd48cf83d82e993a1c9b0_JaffaCakes118.exe
-
Size
56KB
-
MD5
380dc38441dcd48cf83d82e993a1c9b0
-
SHA1
0e11036f6ff4ca7b967a913e5044103452a9d3b7
-
SHA256
32f6eb9688bb8663d1889c65ba3af7fcc5cae978f8d88c43be8431c748b2c4ac
-
SHA512
8eaf7ea8667fd0c662e1a30300185b5a837edf5f08762ba77d6250ba3d4afd6835f57dd9ff2fcc84511e7204f3a772fea805ad7440c3cae451c04e1e236174fe
-
SSDEEP
768://KLDgL6AMlILCtQ12/eZHRxlGxuq82RUuoWjb51XSyGNdQJpdE://KgBMlQGeZHRxlGxuI6uo4DXSysQ7d
Score
7/10
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\380dc38441dcd48cf83d82e993a1c9b0_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\380dc38441dcd48cf83d82e993a1c9b0_JaffaCakes118.exe"2⤵
- Loads dropped DLL
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9KB
MD50adb6f82125d3cb830a532da154677f0
SHA1b1abad527ee1ed71bd4f00e1bb01214185398efb
SHA2563449618ca5da3813402d38b8890462af1c90d8a991583e4c0492c3a81b60f425
SHA512199060e350c1101f138d6b2151fc465e930eed495af77aaeaab837b10ca6d1fc113e32be51b5abe9b9d6c00dc73edf2d80ce720e99aabb8cd60ceae458c640fc
-
Filesize
416KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
416KB