Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    19-09-2024 05:38

General

  • Target

    eaafa4d7e86d2e49ca9a8e1cad9b6e99_JaffaCakes118.exe

  • Size

    16KB

  • MD5

    eaafa4d7e86d2e49ca9a8e1cad9b6e99

  • SHA1

    ef59fc9794cf7d9e082ffe4580bace602102c3ca

  • SHA256

    c7d93feeff3584bbfde30f7b5c44ab44102e399f74a8c9f0019882f9a52a36e6

  • SHA512

    9de35a36a83815d5183f5fcee04c9dee25a034b678dfbea742027463d3a40e826f18d323f74d8c02ccf0f93be454a72af19a74bea6472d0011ba418741c855b0

  • SSDEEP

    384:RQ8F7c7mGoAp6gAamsTskdYqL9zbfk/kgF+Psqeh:y7okAaNT9YqZzo/kgF+PZ

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Drops file in System32 directory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\eaafa4d7e86d2e49ca9a8e1cad9b6e99_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\eaafa4d7e86d2e49ca9a8e1cad9b6e99_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    PID:2704

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Windows\SysWOW64\lo.dll

    Filesize

    1.1MB

    MD5

    2ee1e467d73642afddb03019f58c252b

    SHA1

    ea1f3b03f46db029a955190692cecbc571e1d46c

    SHA256

    5a7d5dafe22082b3ed035d640578ed7b5005edfe80e5c911774ec77a2caff1b3

    SHA512

    3482715d7c9adbfe61f7834120d1a8fce47ae5d70add285ddcfe8802a5d4a95ae00ae82079b9b9639c5d4fa5126ecfc61e1b09a141c0fea86926e26fc22f9082

  • memory/2704-0-0x0000000000400000-0x00000000004132FF-memory.dmp

    Filesize

    76KB

  • memory/2704-2-0x0000000000401000-0x0000000000410000-memory.dmp

    Filesize

    60KB

  • memory/2704-1-0x0000000000400000-0x00000000004132FF-memory.dmp

    Filesize

    76KB

  • memory/2704-5-0x0000000000401000-0x0000000000410000-memory.dmp

    Filesize

    60KB

  • memory/2704-4-0x0000000000400000-0x00000000004132FF-memory.dmp

    Filesize

    76KB