Overview

overview

6

Static

static

3

ab4784ec20...18.exe

windows7-x64

6

ab4784ec20...18.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    19/08/2024, 13:52

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ab4784ec20c31443dffba159cbaca373_JaffaCakes118.exe

  • Size

    88KB

  • MD5

    ab4784ec20c31443dffba159cbaca373

  • SHA1

    2d5008860efd215f9bbb8503ef41306bc7fb9c1f

  • SHA256

    a3dec8695507f42ef3c457c107be87a15368f4e780c9b22844cb77c7f32d193b

  • SHA512

    e9886960b973fdc9280808f6411d0783bcdaf5b7a8bb6f8b5bc985da0a646d73cdc72e5844475933568386112228d0ff740752df1c954abea6226e3a712239de

  • SSDEEP

    1536:O8kp8jfVdxxcUK4Y10Qa1ZwaTQrfvZvoMEZSf+KumnX/u32M0xj/5I:JxcR4INQ6HfNPK2Mc/5I

Score
6/10
persistence

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Suspicious behavior: RenamesItself 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ab4784ec20c31443dffba159cbaca373_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\ab4784ec20c31443dffba159cbaca373_JaffaCakes118.exe"
    1⤵
    • Adds Run key to start application
    • Suspicious behavior: RenamesItself
    PID:3060

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3060-0-0x0000000000400000-0x000000000041A000-memory.dmp

    Filesize

    104KB

    Download