Analysis
-
max time kernel
147s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
17-06-2024 21:44
Behavioral task
behavioral1
Sample
2024-06-17_ef88e6547244f1215ad4087b5a92a7f9_cryptolocker_JaffaCakes118.exe
Resource
win7-20240611-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-17_ef88e6547244f1215ad4087b5a92a7f9_cryptolocker_JaffaCakes118.exe
Resource
win10v2004-20240508-en
1 signatures
150 seconds
General
-
Target
2024-06-17_ef88e6547244f1215ad4087b5a92a7f9_cryptolocker_JaffaCakes118.exe
-
Size
393KB
-
MD5
dd109e0b4a25c174c826f7fab1574697
-
SHA1
3faeafb67f9cb80bb7ff2933ca74f67930af75b4
-
SHA256
254bc6b1fd5d5c04bee187f693e4544a8eabe24e99d6b1ea321ce2f897871816
-
SHA512
27521ca4309feee6b21b158d800f04737b7ca80d27d642367ea65d409c1a4ecfebfe256f5c7874404237dca4277554424ea3a222af94bf42e7626b0506604722
-
SSDEEP
6144:eiLAQrKanaU5AsSXYCQ6Kj28ov71tl9KXDQrOkcYB1RL:eiLZV15AszCQ6KC8oz1RKQOhe1RL
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 3964 3172 WerFault.exe 2024-06-17_ef88e6547244f1215ad4087b5a92a7f9_cryptolocker_JaffaCakes118.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-17_ef88e6547244f1215ad4087b5a92a7f9_cryptolocker_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-17_ef88e6547244f1215ad4087b5a92a7f9_cryptolocker_JaffaCakes118.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3172 -s 2242⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 3172 -ip 31721⤵