Analysis

  • max time kernel
    95s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/04/2024, 15:49

General

  • Target

    ea58ed6bd23b842d9f21abb97cf65ad1_JaffaCakes118.exe

  • Size

    1.1MB

  • MD5

    ea58ed6bd23b842d9f21abb97cf65ad1

  • SHA1

    cc6e6649cbdb3a548ceb4e7ec61fe2079453c8b0

  • SHA256

    e7041871f370f43c5160442dd63f5a74ea7a324801821f6fe2b928be0d389e3f

  • SHA512

    cf42142a60a62e5747878262d343cc46be81dd19313428ab01411099de33e081c5983c5d6339344570c01d2872a40061f956842b3e24e2d6e0363b3c087501c6

  • SSDEEP

    24576:xvTdadj8CLRsFiuJ2q5Qb8wDNQsUReWOM+YVVGLuAoS:xvTAdLROiuYfDNQDeWOMnsP

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ea58ed6bd23b842d9f21abb97cf65ad1_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\ea58ed6bd23b842d9f21abb97cf65ad1_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:3168

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\E_4\krnln.fnr

    Filesize

    1.0MB

    MD5

    1081d7eb7a17faedfa588b93fc85365e

    SHA1

    884e264fa37bfb9e71d24f3f5c7554fdf94a8b9f

    SHA256

    0351d055cf1e194302ab125cc93208a8c733efb45dc301ca6e7e2a4051f411e0

    SHA512

    1ff9e7c495b9e005c8d3b56219794c31d804fe1944429e3d4fe013fd8fcb3f51c02b588748c7d9d869fdb115851932e8db4e6792aecd9c83f28237702582ba81

  • memory/3168-0-0x0000000000400000-0x0000000000426000-memory.dmp

    Filesize

    152KB

  • memory/3168-6-0x0000000000400000-0x0000000000426000-memory.dmp

    Filesize

    152KB