Overview

overview

6

Static

static

3

4425025396...18.exe

windows7-x64

6

4425025396...18.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    94s
  • max time network
    138s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/07/2024, 03:39

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    44250253960fb0286ba661cd1d9e0156_JaffaCakes118.exe

  • Size

    247KB

  • MD5

    44250253960fb0286ba661cd1d9e0156

  • SHA1

    20eb1cdf51e80cc8dacfaeabcb49fca13572faca

  • SHA256

    5921c2cf49be87bc14a3db9178c034f3101ce2754bd887d5cbeec388df9a6fef

  • SHA512

    381b8bad30fa01bb91b035402da6ad7e1efe7961291bf8603f9472c673524f00e592d2f40ddb32d99b7d95bd3d6bc48c9b50887dfe0453872100cce27668edf4

  • SSDEEP

    3072:P6jFIozu/NxGgK96uLWvHq3UNXFyRJiGewdvXXhA0RCUG4GM5:ij+vN26uLWv4NewJnuwG4G

Score
6/10
persistence

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Suspicious behavior: RenamesItself 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\44250253960fb0286ba661cd1d9e0156_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\44250253960fb0286ba661cd1d9e0156_JaffaCakes118.exe"
    1⤵
    • Adds Run key to start application
    • Suspicious behavior: RenamesItself
    PID:2516

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2516-0-0x0000000000400000-0x0000000000448000-memory.dmp

          Filesize

          288KB

          Download