Overview

overview

10

Static

static

3

71e99721c8...18.exe

windows7-x64

1

71e99721c8...18.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    140s
  • max time network
    132s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/07/2024, 00:38

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    71e99721c8657c16d8925d4348dc83d3_JaffaCakes118.exe

  • Size

    704KB

  • MD5

    71e99721c8657c16d8925d4348dc83d3

  • SHA1

    1c7654a677b661ff5552fbe8936a6eff0f7c2277

  • SHA256

    6cf452498ace4334d2f4c2f703aa1995973aae6168fd620d09beabb5edab894b

  • SHA512

    6eaa52d2d94d3fa08bb1c74e1405786ba74e1c2aef23d0d1a6d38ef5721d85a724b18f0d06c8096998f20485cba6400aa9034d9f303e962a4ff0adcfe86f1e28

  • SSDEEP

    12288:LCMZIjYqr1dmyfwLATVXr/7WNXy077ROguTZJqvkAI90K/I8zgp:LJW51lfwLAT1GFzuTm8AILw

Score
10/10
mimikatz

Malware Config

Signatures

  • Mimikatz

    mimikatz is an open source tool to dump credentials on Windows.

    mimikatz
  • mimikatz is an open source tool to dump credentials on Windows 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\71e99721c8657c16d8925d4348dc83d3_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\71e99721c8657c16d8925d4348dc83d3_JaffaCakes118.exe"
    1⤵
      PID:1096

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1096-0-0x0000000000400000-0x00000000004B6000-memory.dmp

      Filesize

      728KB

      Download

    • memory/1096-6-0x00000000006C0000-0x000000000075A000-memory.dmp

      Filesize

      616KB

      Download

    • memory/1096-7-0x0000000002820000-0x0000000002962000-memory.dmp

      Filesize

      1.3MB

      Download

    • memory/1096-10-0x0000000002820000-0x0000000002962000-memory.dmp

      Filesize

      1.3MB

      Download