Analysis

  • max time kernel
    140s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    12/07/2024, 20:48

General

  • Target

    3ed3f89b8ac02e7fb59f74f0e3b9d8fe_JaffaCakes118.exe

  • Size

    1.7MB

  • MD5

    3ed3f89b8ac02e7fb59f74f0e3b9d8fe

  • SHA1

    94eb97cd0a282a1711e87ae5b29b4d46e9dd840d

  • SHA256

    1cf4a46676418056e9c8bc115670924ebf535df342d715a0ffb464e4c1a212a1

  • SHA512

    1a7c0ba5045a602e6ad5678dbaf98ce0859926a7e19deaba59a271a1a6a76378d34824784bc3717aebafec90eefb618e595a58c0ae09e6a3d8d319ea38e2f9e4

  • SSDEEP

    24576:WruA5Hg6NP+5slqS/jqA3MobfY/7yXDesl9Izr6Fjq9OsuevmpShpp0GkphZLk7c:WrB5lQ5slf/jhtnXD9IP8gops7nMhSo

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3ed3f89b8ac02e7fb59f74f0e3b9d8fe_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\3ed3f89b8ac02e7fb59f74f0e3b9d8fe_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:3028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3028-0-0x0000000000400000-0x000000000069B000-memory.dmp

    Filesize

    2.6MB

  • memory/3028-9-0x0000000003280000-0x0000000003281000-memory.dmp

    Filesize

    4KB

  • memory/3028-8-0x0000000000280000-0x0000000000281000-memory.dmp

    Filesize

    4KB

  • memory/3028-7-0x00000000003E0000-0x00000000003E1000-memory.dmp

    Filesize

    4KB

  • memory/3028-6-0x0000000000270000-0x0000000000271000-memory.dmp

    Filesize

    4KB

  • memory/3028-5-0x00000000002C0000-0x00000000002C1000-memory.dmp

    Filesize

    4KB

  • memory/3028-4-0x00000000002E0000-0x00000000002E1000-memory.dmp

    Filesize

    4KB

  • memory/3028-3-0x00000000002F0000-0x00000000002F1000-memory.dmp

    Filesize

    4KB

  • memory/3028-2-0x00000000002A0000-0x00000000002A1000-memory.dmp

    Filesize

    4KB

  • memory/3028-1-0x0000000000380000-0x00000000003DA000-memory.dmp

    Filesize

    360KB

  • memory/3028-15-0x0000000003280000-0x0000000003281000-memory.dmp

    Filesize

    4KB

  • memory/3028-18-0x0000000003270000-0x0000000003271000-memory.dmp

    Filesize

    4KB

  • memory/3028-17-0x0000000003270000-0x0000000003271000-memory.dmp

    Filesize

    4KB

  • memory/3028-16-0x0000000003270000-0x0000000003271000-memory.dmp

    Filesize

    4KB

  • memory/3028-14-0x0000000003280000-0x0000000003281000-memory.dmp

    Filesize

    4KB

  • memory/3028-13-0x0000000003280000-0x0000000003281000-memory.dmp

    Filesize

    4KB

  • memory/3028-12-0x0000000003280000-0x0000000003281000-memory.dmp

    Filesize

    4KB

  • memory/3028-11-0x0000000003280000-0x0000000003281000-memory.dmp

    Filesize

    4KB

  • memory/3028-10-0x00000000002B0000-0x00000000002B1000-memory.dmp

    Filesize

    4KB

  • memory/3028-38-0x0000000003270000-0x0000000003271000-memory.dmp

    Filesize

    4KB

  • memory/3028-48-0x0000000003270000-0x0000000003271000-memory.dmp

    Filesize

    4KB

  • memory/3028-47-0x0000000003270000-0x0000000003271000-memory.dmp

    Filesize

    4KB

  • memory/3028-46-0x0000000003270000-0x0000000003271000-memory.dmp

    Filesize

    4KB

  • memory/3028-45-0x0000000003270000-0x0000000003271000-memory.dmp

    Filesize

    4KB

  • memory/3028-44-0x0000000003270000-0x0000000003271000-memory.dmp

    Filesize

    4KB

  • memory/3028-43-0x0000000003270000-0x0000000003271000-memory.dmp

    Filesize

    4KB

  • memory/3028-42-0x0000000003270000-0x0000000003271000-memory.dmp

    Filesize

    4KB

  • memory/3028-41-0x0000000003270000-0x0000000003271000-memory.dmp

    Filesize

    4KB

  • memory/3028-40-0x0000000003270000-0x0000000003271000-memory.dmp

    Filesize

    4KB

  • memory/3028-39-0x0000000002100000-0x0000000002101000-memory.dmp

    Filesize

    4KB

  • memory/3028-37-0x0000000003280000-0x0000000003281000-memory.dmp

    Filesize

    4KB

  • memory/3028-36-0x0000000003280000-0x0000000003281000-memory.dmp

    Filesize

    4KB

  • memory/3028-35-0x0000000003280000-0x0000000003281000-memory.dmp

    Filesize

    4KB

  • memory/3028-34-0x0000000003280000-0x0000000003281000-memory.dmp

    Filesize

    4KB

  • memory/3028-33-0x0000000003280000-0x0000000003281000-memory.dmp

    Filesize

    4KB

  • memory/3028-32-0x00000000024E0000-0x00000000024E1000-memory.dmp

    Filesize

    4KB

  • memory/3028-31-0x0000000003280000-0x0000000003281000-memory.dmp

    Filesize

    4KB

  • memory/3028-30-0x00000000024B0000-0x00000000024B1000-memory.dmp

    Filesize

    4KB

  • memory/3028-29-0x00000000024A0000-0x00000000024A1000-memory.dmp

    Filesize

    4KB

  • memory/3028-28-0x00000000024F0000-0x00000000024F1000-memory.dmp

    Filesize

    4KB

  • memory/3028-27-0x0000000002510000-0x0000000002511000-memory.dmp

    Filesize

    4KB

  • memory/3028-26-0x00000000024D0000-0x00000000024D1000-memory.dmp

    Filesize

    4KB

  • memory/3028-25-0x0000000003270000-0x0000000003271000-memory.dmp

    Filesize

    4KB

  • memory/3028-24-0x00000000007B0000-0x00000000007B1000-memory.dmp

    Filesize

    4KB

  • memory/3028-23-0x00000000020F0000-0x00000000020F1000-memory.dmp

    Filesize

    4KB

  • memory/3028-22-0x0000000002480000-0x0000000002481000-memory.dmp

    Filesize

    4KB

  • memory/3028-21-0x0000000002150000-0x0000000002151000-memory.dmp

    Filesize

    4KB

  • memory/3028-20-0x0000000002160000-0x0000000002161000-memory.dmp

    Filesize

    4KB

  • memory/3028-19-0x00000000007D0000-0x00000000007D1000-memory.dmp

    Filesize

    4KB

  • memory/3028-49-0x0000000003270000-0x0000000003272000-memory.dmp

    Filesize

    8KB

  • memory/3028-50-0x00000000032C0000-0x0000000003400000-memory.dmp

    Filesize

    1.2MB

  • memory/3028-51-0x0000000003280000-0x0000000003281000-memory.dmp

    Filesize

    4KB

  • memory/3028-56-0x0000000003290000-0x0000000003291000-memory.dmp

    Filesize

    4KB

  • memory/3028-55-0x00000000032A0000-0x00000000032A1000-memory.dmp

    Filesize

    4KB

  • memory/3028-54-0x00000000032B0000-0x00000000032B1000-memory.dmp

    Filesize

    4KB

  • memory/3028-53-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/3028-52-0x0000000000240000-0x0000000000241000-memory.dmp

    Filesize

    4KB

  • memory/3028-57-0x0000000000400000-0x000000000069B000-memory.dmp

    Filesize

    2.6MB

  • memory/3028-59-0x0000000000380000-0x00000000003DA000-memory.dmp

    Filesize

    360KB

  • memory/3028-60-0x0000000003270000-0x0000000003271000-memory.dmp

    Filesize

    4KB

  • memory/3028-62-0x00000000032C0000-0x0000000003400000-memory.dmp

    Filesize

    1.2MB