Analysis

  • max time kernel
    14s
  • max time network
    18s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    23/08/2024, 03:51

General

  • Target

    ba3f1050e9da5b8cc70311ce33a66b1a_JaffaCakes118.exe

  • Size

    111KB

  • MD5

    ba3f1050e9da5b8cc70311ce33a66b1a

  • SHA1

    e0a58bfd5835e09827b27140c11c1570fb0e7687

  • SHA256

    4a902dfe87b3c2db5845dbacf6cb434bb6dd4a3ba360efa2473bb7b590eb3a46

  • SHA512

    134933d18de7cbada85af019f47a2b794560b9437d6547a56a3940deb500c17b4049c16da8f8b3eb06d69c3132d9971302ac121bc44e090f540cac3faf05632b

  • SSDEEP

    3072:xCt7T9I3whad9E6hQ3gy/Bkhb5cwJJMOF7sL:xe9IndK4YkhbtF7

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: RenamesItself 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ba3f1050e9da5b8cc70311ce33a66b1a_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\ba3f1050e9da5b8cc70311ce33a66b1a_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: RenamesItself
    PID:2468

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2468-0-0x0000000000418000-0x000000000041B000-memory.dmp

          Filesize

          12KB

        • memory/2468-1-0x0000000000400000-0x0000000000423000-memory.dmp

          Filesize

          140KB

        • memory/2468-2-0x0000000000400000-0x0000000000423000-memory.dmp

          Filesize

          140KB

        • memory/2468-4-0x0000000000418000-0x000000000041B000-memory.dmp

          Filesize

          12KB