Analysis

  • max time kernel
    141s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    09-09-2024 14:27

General

  • Target

    d68102814f9ac8490034caf7be3a0006_JaffaCakes118.exe

  • Size

    99KB

  • MD5

    d68102814f9ac8490034caf7be3a0006

  • SHA1

    25fd8385b3a0698ea3906ebb199ab63dd15275a0

  • SHA256

    40131d2852b212efc6c7f74b3dbbcc12a86658ad98bb6e8ac28eb687ed33be59

  • SHA512

    b07e5d4b369a97185b91f656fded9daca202ee03ab34884ea7deaa519ff979afb319377743c7d9c53d434abe8e31b38b7b0dbb4b21f29cb3fa317822d5db54bb

  • SSDEEP

    3072:RGFi96/EQhhiC9P8dwyWbeCYLcyEKLqVX:UwwE2KdwydCYY3KLqVX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d68102814f9ac8490034caf7be3a0006_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\d68102814f9ac8490034caf7be3a0006_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1868

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1868-0-0x0000000000400000-0x0000000000448000-memory.dmp

    Filesize

    288KB

  • memory/1868-1-0x0000000000400000-0x0000000000448000-memory.dmp

    Filesize

    288KB

  • memory/1868-2-0x0000000000400000-0x0000000000448000-memory.dmp

    Filesize

    288KB

  • memory/1868-3-0x0000000000400000-0x0000000000448000-memory.dmp

    Filesize

    288KB

  • memory/1868-4-0x0000000000400000-0x0000000000448000-memory.dmp

    Filesize

    288KB

  • memory/1868-5-0x0000000000400000-0x0000000000448000-memory.dmp

    Filesize

    288KB

  • memory/1868-6-0x0000000000400000-0x0000000000448000-memory.dmp

    Filesize

    288KB

  • memory/1868-7-0x0000000000400000-0x0000000000448000-memory.dmp

    Filesize

    288KB

  • memory/1868-8-0x0000000000400000-0x0000000000448000-memory.dmp

    Filesize

    288KB

  • memory/1868-9-0x0000000000400000-0x0000000000448000-memory.dmp

    Filesize

    288KB

  • memory/1868-10-0x0000000000400000-0x0000000000448000-memory.dmp

    Filesize

    288KB

  • memory/1868-11-0x0000000000400000-0x0000000000448000-memory.dmp

    Filesize

    288KB

  • memory/1868-12-0x0000000000400000-0x0000000000448000-memory.dmp

    Filesize

    288KB

  • memory/1868-13-0x0000000000400000-0x0000000000448000-memory.dmp

    Filesize

    288KB