Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    29/09/2024, 13:24

General

  • Target

    fe9e82b55a81ede05f547b70c7220631_JaffaCakes118.exe

  • Size

    76KB

  • MD5

    fe9e82b55a81ede05f547b70c7220631

  • SHA1

    df98205741512dbc1add4a91c3194f32e5f59f2e

  • SHA256

    3b72cd10a4fc9cf7225d6382c6f707e0f691a5ab090ee14a58a9941be463ff7d

  • SHA512

    7ed18f6c56600ddaf3295b44234f03de99a499ecd3aee7921b31af811f48b506b5b266d2d23200da31cd76c3e128f37e78094faaa8e58e055c1eeb3dc85958eb

  • SSDEEP

    1536:iSP6O1Gwwj5rZvSIM5Yxee9S0P6p8UX4vcQfF97vbxqBq51GM:iSSYwj5rZvSgeS1UX47rzxqk51G

Score
6/10

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Suspicious behavior: RenamesItself 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fe9e82b55a81ede05f547b70c7220631_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\fe9e82b55a81ede05f547b70c7220631_JaffaCakes118.exe"
    1⤵
    • Adds Run key to start application
    • Suspicious behavior: RenamesItself
    PID:2540

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2540-0-0x0000000000400000-0x0000000000436000-memory.dmp

          Filesize

          216KB

        • memory/2540-1-0x0000000000020000-0x0000000000023000-memory.dmp

          Filesize

          12KB

        • memory/2540-2-0x0000000000400000-0x0000000000436000-memory.dmp

          Filesize

          216KB

        • memory/2540-4-0x0000000000400000-0x0000000000436000-memory.dmp

          Filesize

          216KB

        • memory/2540-5-0x0000000000020000-0x0000000000023000-memory.dmp

          Filesize

          12KB

        • memory/2540-15-0x0000000000400000-0x0000000000436000-memory.dmp

          Filesize

          216KB

        • memory/2540-16-0x0000000000400000-0x0000000000436000-memory.dmp

          Filesize

          216KB