Analysis
-
max time kernel
140s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
11/04/2024, 01:00
General
-
Target
ec5bd1b99cdf4bc50fb5749d95a7e709_JaffaCakes118.exe
-
Size
25KB
-
MD5
ec5bd1b99cdf4bc50fb5749d95a7e709
-
SHA1
70cce4f4c33f052067014edf1d0496a10dd7edc0
-
SHA256
6a291ee254b5b9cb92c166de4ab15193efa5cf025928e2c77f671d1e420bbaec
-
SHA512
85a398c0fe1becc3d66401fdfc517cfaeef0f95b8cd77f64b6d50b38729544464dbcee72d95c0348e7f9189f872c554973d7231728d19cf9ecf7a628d035d8af
-
SSDEEP
768:xFP4gpQB+ctZ2lHcINglRoRX3cfIC/7ziGaC:xFPK+u2llNVmfz7V
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ec5bd1b99cdf4bc50fb5749d95a7e709_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ec5bd1b99cdf4bc50fb5749d95a7e709_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
33KB
MD5daa54ee3ac4a56a1048d63171e0c05a2
SHA183de74f1128ac90b574f90381fd70c28acc84ad3
SHA2560966eee5210da898d04126d0283bbb063baacb266fca67334ead6a6c05e9f448
SHA5127b654aca3792f1a7d1192295ff54d42b8b0b4138a3f0dcce4e47a79e41d1c5bc3f263b329b5182b34bbf14c84cdb82b3fc4e539f6e857355771742a4869efbba
-
Filesize
96KB
-
Filesize
56KB
-
Filesize
96KB
-
Filesize
56KB