Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/07/2024, 22:39

General

  • Target

    6514941d256a48e46e81a83923b006a7_JaffaCakes118.exe

  • Size

    1.2MB

  • MD5

    6514941d256a48e46e81a83923b006a7

  • SHA1

    484b14c4b8390ca60ff9f6a0b8c9ec17d2f00658

  • SHA256

    18ce12cddd466ba96a7ba44b34cae65fa5ec5c299eee2f6610b52d067b644b01

  • SHA512

    32984fa2dc64b968d52eeb814e6f736b6e4584e9da4087809c252a7970a5504b465d50b816cecb8319fff590c97e6fdd4c73889bfa72a32e4644a3d7e92b9b59

  • SSDEEP

    24576:f1bk4301Z/8s1XJd5FPIZfxWw7iDZhn3uW6X0u8nAfOOtXqi/sUYCiQ/:f5krZBjd5NR+W6XrFqiEnQ/

Score
7/10

Malware Config

Signatures

  • Identifies Wine through registry keys 2 TTPs 1 IoCs

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

Processes

  • C:\Users\Admin\AppData\Local\Temp\6514941d256a48e46e81a83923b006a7_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\6514941d256a48e46e81a83923b006a7_JaffaCakes118.exe"
    1⤵
    • Identifies Wine through registry keys
    PID:4940

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4940-1-0x0000000000400000-0x0000000000798515-memory.dmp

    Filesize

    3.6MB

  • memory/4940-0-0x0000000000668000-0x0000000000799000-memory.dmp

    Filesize

    1.2MB

  • memory/4940-2-0x0000000000400000-0x0000000000798515-memory.dmp

    Filesize

    3.6MB