Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-07-2024 01:36

General

  • Target

    59ef78595afd100aaba38b68725de5e4_JaffaCakes118.exe

  • Size

    1.0MB

  • MD5

    59ef78595afd100aaba38b68725de5e4

  • SHA1

    7944c9695f281997402892720cd37509eec60496

  • SHA256

    629a5b315e96d9399f9f9a7c999581029c4d52ea1ca3d7194dd5555f831602b8

  • SHA512

    6c1194a3af5ac0e7d689d62a0d57e4f88d69269729370f992d51e1fc5666adb59286620d03ab6a0b4f9b1614154956845afbf28962968e8db3a730fb20b5c3df

  • SSDEEP

    24576:bDyxAU/oieoRpNkWeIejsYbA6Q3mGLj99iQLGFS1IX3tjL:8AUZrN8IScWWPGFLntv

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\59ef78595afd100aaba38b68725de5e4_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\59ef78595afd100aaba38b68725de5e4_JaffaCakes118.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:4812

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4812-0-0x0000000001000000-0x0000000001105000-memory.dmp

    Filesize

    1.0MB

  • memory/4812-3-0x00000000750B0000-0x00000000752C5000-memory.dmp

    Filesize

    2.1MB

  • memory/4812-1484-0x0000000000DC0000-0x0000000000F72000-memory.dmp

    Filesize

    1.7MB

  • memory/4812-1486-0x0000000075D90000-0x0000000075F30000-memory.dmp

    Filesize

    1.6MB

  • memory/4812-4050-0x00000000770A0000-0x000000007711A000-memory.dmp

    Filesize

    488KB

  • memory/4812-6532-0x0000000001001000-0x0000000001002000-memory.dmp

    Filesize

    4KB

  • memory/4812-6533-0x0000000001000000-0x0000000001105000-memory.dmp

    Filesize

    1.0MB

  • memory/4812-6535-0x0000000000DC0000-0x0000000000F72000-memory.dmp

    Filesize

    1.7MB