Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/07/2024, 01:07

General

  • Target

    658ad8d349d627bdc94c88771f10568d_JaffaCakes118.exe

  • Size

    283KB

  • MD5

    658ad8d349d627bdc94c88771f10568d

  • SHA1

    7f5c3c67e203a5ee5096f54db2617afe5e041855

  • SHA256

    1eb6108810bf05065aaf66d35643fa2e06a130060082d6208f9181352c1b96d7

  • SHA512

    8bfa9e78b517386e4165b15ce5e1a922fdf8fa355f2a4aa9fdb13dd8e59f47997f64295622042355c75802d153b24cd0e14af846505e8b77b540edb10a2217c4

  • SSDEEP

    6144:cZvQey+1ymvcQm4MsG4hYm04BYQ2ugXnGE6lHlxWIIiR9pLGc:cZIL+1UQgspGTSvgR6BDB9ph

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\658ad8d349d627bdc94c88771f10568d_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\658ad8d349d627bdc94c88771f10568d_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    PID:5036

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\Tsu-13AC.dll

          Filesize

          249KB

          MD5

          1723b9b13f5fc3cf7a785f85fa35802b

          SHA1

          4b97d952d4bf7c21d3be5e01d96f4d47e30d54c7

          SHA256

          26f38906f4b09a1145d42e3c372d13a5b1cd92aded55107f2ce624314b663293

          SHA512

          bdde642275db7184d2967fc356de3c67189f15c6bea0107038b302cf5e8396f3844153d47604860de2962ef2d7738887601cfc749b47571f7a1a9446b74a0f47

        • C:\Users\Admin\AppData\Local\Temp\{2F21799F-3390-CFD9-2D32-7BB2F4C25B69}\_Setup.dll

          Filesize

          169KB

          MD5

          e3e4189e17648810ffac83bfefb53e91

          SHA1

          33318dba25258649b8c516eea48dd51bb5797f12

          SHA256

          f2fc03a00cea1866340627ba3601e706e288f33a0e6e550b0c6dc45a05e8d20e

          SHA512

          e69c95176fd50337c098960b647066d193f62003140938baada0db7d89406889f86dc62de8da4a6c458719ecee2dcb22c242691c6f5bed8d6cc6fdabd0c8b5cf

        • C:\Users\Admin\AppData\Local\Temp\{2F21799F-3390-CFD9-2D32-7BB2F4C25B69}\_Setupx.dll

          Filesize

          22KB

          MD5

          faf6319624deae130bf3aea6f92c3421

          SHA1

          dc3d95d004460a1cd104c2004cea90b33afa6c1d

          SHA256

          740168decf0e944cb850bf89cb64bc742c5247dea46946d42ed942b378846e8e

          SHA512

          83005405087d55a139b63fd54f1955f523cb8dea62339f60b757fbab88f2a18942973b5cbb8339f776d36b8e60dc51c07ecce2a25ab33e3c6e89294d3d2f9955