Overview

overview

7

Static

static

3

4dbb65af75...18.exe

windows7-x64

7

4dbb65af75...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    16-07-2024 09:34

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4dbb65af75d031b700bedaa97f4e6c8a_JaffaCakes118.exe

  • Size

    1.9MB

  • MD5

    4dbb65af75d031b700bedaa97f4e6c8a

  • SHA1

    764c243c082d5dc43225f233ba6ce0d66fd89fef

  • SHA256

    e24de67f68709c6beea560cd16a1b3bd82feed42aed63aff51b8c69ab5388044

  • SHA512

    2d8dbdd3224924bde6c3abe1c7268afcbc6507c7477e5410e4c4f95bd9695fb0952e7428de11e02189f5fe9120c5bad663a2cc1cdca0566af2a6aceb3f85f477

  • SSDEEP

    24576:N2oo60HPdt+1CRiY2eOBvcj3u10dCZ4tIyit1KK5IvQqWZwoa17vHF7OZZH5L9D:Qoa1taC070dCZanuEK5cbca1DHF6ZZHX

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4dbb65af75d031b700bedaa97f4e6c8a_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\4dbb65af75d031b700bedaa97f4e6c8a_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2316
    • C:\Users\Admin\AppData\Local\Temp\ABF8.tmp
      "C:\Users\Admin\AppData\Local\Temp\ABF8.tmp" --splashC:\Users\Admin\AppData\Local\Temp\4dbb65af75d031b700bedaa97f4e6c8a_JaffaCakes118.exe 48EE5E29D6768E3E885D133720A6FBF53A61017FDB2ACC358F41C66C4CEDCA16EE4738728AA50565194868959E5ADC6BB1CAE70E98EF1EDC59B72286C372D0CB
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2424

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\ABF8.tmp
    Filesize

    1.9MB

    MD5

    b74e0b63b1a4378356f3e28daf674ab7

    SHA1

    46d4cb13b2dfe33e9039804f86b1bbef0307cf61

    SHA256

    b4f2a0c8306dccc2823fbd9d47624e4c55c73b95c139d57c88b35f5f88843ca2

    SHA512

    9abed953c1dcc2d4730d4761f35144305b63a72e84ea87c75c140d2bcf55712746cb2718c4694e80098301253d902e71f29426459a6d038ae8f782caaf93e0a7

    Download Submit

  • memory/2316-0-0x0000000000400000-0x00000000005E6000-memory.dmp

    Filesize

    1.9MB

    Download

  • memory/2424-6-0x0000000000400000-0x00000000005E6000-memory.dmp

    Filesize

    1.9MB

    Download