Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04-10-2024 18:19

General

  • Target

    1471a4f71e5b9e929489b56f58b4f190_JaffaCakes118.exe

  • Size

    134KB

  • MD5

    1471a4f71e5b9e929489b56f58b4f190

  • SHA1

    3bbe0885749bbffd89063a9e9b7998467692b634

  • SHA256

    aed9a85f6c1cc885b43a24dbd43f9c36b6baaf05b5b904c42a4ef43b6f1773d8

  • SHA512

    be7a96938a64665063dda0f1f5d9999aafdb2e2eee07e95356ed92f426af2ca135a6d838aaf09d9aa77af32ac70d477b6772939a6b4a82e00c1f6f386b148ca7

  • SSDEEP

    3072:ytExij3pO5wUajYbgsYlPbQK2SGXKSpH:ywij3E5w1UbtusSyKSp

Score
6/10

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1471a4f71e5b9e929489b56f58b4f190_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\1471a4f71e5b9e929489b56f58b4f190_JaffaCakes118.exe"
    1⤵
    • Adds Run key to start application
    PID:2572

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2572-0-0x00007FFAF6973000-0x00007FFAF6975000-memory.dmp

    Filesize

    8KB

  • memory/2572-1-0x00000000005B0000-0x00000000005D8000-memory.dmp

    Filesize

    160KB

  • memory/2572-2-0x00007FFAF6970000-0x00007FFAF7431000-memory.dmp

    Filesize

    10.8MB

  • memory/2572-3-0x00007FFAF6970000-0x00007FFAF7431000-memory.dmp

    Filesize

    10.8MB

  • memory/2572-4-0x00007FFAF6970000-0x00007FFAF7431000-memory.dmp

    Filesize

    10.8MB

  • memory/2572-5-0x00007FFAF6973000-0x00007FFAF6975000-memory.dmp

    Filesize

    8KB

  • memory/2572-6-0x00007FFAF6970000-0x00007FFAF7431000-memory.dmp

    Filesize

    10.8MB