Overview

overview

1

Static

static

1

edfa042a6d...18.exe

windows7-x64

1

edfa042a6d...18.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    146s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11-04-2024 17:34

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    edfa042a6d278cffa7c4233e37a0249f_JaffaCakes118.exe

  • Size

    635KB

  • MD5

    edfa042a6d278cffa7c4233e37a0249f

  • SHA1

    bfdff62457421dc019f86c6100f88a024b06bc5f

  • SHA256

    280f80df7bfea70156006f427062bc1817cfd4cf2da5fafc563bfc9f3fe9681e

  • SHA512

    d776d91d1bfbd800190bb090f89839634cfc27093e86a49ffc89c8eee057f3401a282aad5d6f440deac194f4a19bfdc200d7bc580e4c58547bb57e6f04d16996

  • SSDEEP

    12288:OYbfPfTYwQrPkdMmaza77JYxdLdAGDK/RCYhOZkqXQLLikpsY:OYb/TYwQrPkdMmazaHJYxpnDGRCYhRqs

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\edfa042a6d278cffa7c4233e37a0249f_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\edfa042a6d278cffa7c4233e37a0249f_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4992
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4192 --field-trial-handle=2276,i,5697607538120380977,9987005253899555344,262144 --variations-seed-version /prefetch:8
    1⤵
      PID:4508

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\offconfig.temp
      Filesize

      114B

      MD5

      e89f75f918dbdcee28604d4e09dd71d7

      SHA1

      f9d9055e9878723a12063b47d4a1a5f58c3eb1e9

      SHA256

      6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023

      SHA512

      8df0ab2e3679b64a6174deff4259ae5680f88e3ae307e0ea2dfff88ec4ba14f3477c9fe3a5aa5da3a8e857601170a5108ed75f6d6975958ac7a314e4a336aed0

      Download Submit