Analysis
- max time kernel
134s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20240704-en - resource tags
- submitted
20/07/2024, 01:37
General
- Target 5e89d07a1fbeff15a09cb8586e3b254c_JaffaCakes118.exe
- Size 807KB
- Sample240720-b2bsvsthjf
- SHA256 3729eb59c1480efa7bd1dfa3d76b4d694df56cb2f1d287e4b94cd270dc3482bf
Malware Config
Signatures
- Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5e89d07a1fbeff15a09cb8586e3b254c_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\5e89d07a1fbeff15a09cb8586e3b254c_JaffaCakes118.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1568 -s 2722⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1568 -ip 15681⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1568-47-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-25-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-13-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-5-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-3-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-1-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-0-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-55-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-153-0x0000000077762000-0x0000000077763000-memory.dmp
memory/1568-187-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-186-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-185-0x0000000077762000-0x0000000077763000-memory.dmp
memory/1568-152-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-63-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-61-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-53-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-51-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-49-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-45-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-43-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-41-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-39-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-37-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-35-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-33-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-31-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-29-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-27-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-23-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-21-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-19-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-17-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-15-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-11-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-9-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-7-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-59-0x00000000005A0000-0x000000000060C000-memory.dmp
memory/1568-57-0x00000000005A0000-0x000000000060C000-memory.dmp