Overview

overview

6

Static

static

3

6742e3634d...18.exe

windows7-x64

6

6742e3634d...18.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    138s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-07-2024 10:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6742e3634dd7379e3e5a07bbd400b75b_JaffaCakes118.exe

  • Size

    792KB

  • MD5

    6742e3634dd7379e3e5a07bbd400b75b

  • SHA1

    08a32696333993c6e30b4ce9cfea9c03927c5f4f

  • SHA256

    92d331dd76a0015f7bf685e5b3296938d366978d63e33c1a04d998c39f83b352

  • SHA512

    2e4083afd766c7f8f3379d8ddfb255ce5aec68a4e4d23b91c0bbfa0b3dd18f9bef081edc81e1e9e53c5d1727c172f9e674c0d4b9027115cb2e699561cd802aa3

  • SSDEEP

    12288:w6sYYl2Cmj3o46URVB7GGAz0YStcC5OULOuGwMBtYboSsJtUeS:w26szo4VRVtHAz0YS2ULOuXoq0r3

Score
6/10
persistence

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Drops file in Program Files directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6742e3634dd7379e3e5a07bbd400b75b_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\6742e3634dd7379e3e5a07bbd400b75b_JaffaCakes118.exe"
    1⤵
    • Adds Run key to start application
    • Drops file in Program Files directory
    PID:3224

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3224-0-0x0000000002370000-0x0000000002371000-memory.dmp

    Filesize

    4KB

    Download

  • memory/3224-1-0x0000000000400000-0x00000000004CD000-memory.dmp

    Filesize

    820KB

    Download