Analysis
-
max time kernel
148s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
15/04/2024, 09:35
General
-
Target
f0bf81a6042296c78f3493e900f87b66_JaffaCakes118.exe
-
Size
1.1MB
-
MD5
f0bf81a6042296c78f3493e900f87b66
-
SHA1
25071d3a5a2daca612a2a5d55a724492425a8be8
-
SHA256
69c212b33d91d7de5b39eacc50dd1a45617c5334badabaff345c91ac8665876e
-
SHA512
9f93f8ddc61d99713069032c9f06845452e536a55db204a7f37ca6031ddc5f35bae3ce61f2ff2ee8e0c4c045fc0134e70bdf73bb16091882398469f0f9b3bdac
-
SSDEEP
24576:DLXl+4dSN0ML0sSzzskDM/Hej0sk1Yh/J3LcAQtmBzu2W:fXlR0XvuM/Hej0sk1Y9JoAqmu
Score
7/10
Malware Config
Signatures
-
UPX packed file 7 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Drops file in System32 directory 1 IoCs
-
Drops file in Windows directory 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f0bf81a6042296c78f3493e900f87b66_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f0bf81a6042296c78f3493e900f87b66_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- Drops file in System32 directory
- Drops file in Windows directory
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.5MB
-
Filesize
4KB
-
Filesize
6.5MB
-
Filesize
6.5MB
-
Filesize
4KB
-
Filesize
6.5MB
-
Filesize
6.5MB
-
Filesize
6.5MB
-
Filesize
6.5MB