Analysis
-
max time kernel
149s -
max time network
114s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
15/04/2024, 09:48
General
-
Target
f0c53fa15620037203d5845787eace30_JaffaCakes118.doc
-
Size
8KB
-
MD5
f0c53fa15620037203d5845787eace30
-
SHA1
f4e75e1893a0bd386e9937c640d292daf35a8758
-
SHA256
064d348724197d42b753f337adcb1693ea5854a2a7433e5c1b6102bdb7edfdf8
-
SHA512
1acc807f6b25871f4d377f05b8bc2b9956ffaf4053e6358d1cc15f8a2a79ef8fc698284ce4cc58f18c0b5c7aad00ca074ab624db356e22f171500ca2da2b066e
-
SSDEEP
48:rGsJusjhdz6ProbY1uP1KP1xP1UUpEuRWyWmww4SKnsFJar/uOUpPs+eKUtDaWFq:R7jhd0141k1p1UUpEO9Pj06eBeWI6e
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of SetWindowsHookEx 9 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\f0c53fa15620037203d5845787eace30_JaffaCakes118.doc" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
245KB
MD5f883b260a8d67082ea895c14bf56dd56
SHA17954565c1f243d46ad3b1e2f1baf3281451fc14b
SHA256ef4835db41a485b56c2ef0ff7094bc2350460573a686182bc45fd6613480e353
SHA512d95924a499f32d9b4d9a7d298502181f9e9048c21dbe0496fa3c3279b263d6f7d594b859111a99b1a53bd248ee69b867d7b1768c42e1e40934e0b990f0ce051e
-
Filesize
102B
MD5982a108231f17227adcd8845a97bb926
SHA136475b1aad9ef7e03ac2e16edb583a9b13969378
SHA25674c56e4152f9dc3b0bc4e9a7ddac3db75934638e0b46db0bc73bfde9e19f841f
SHA5120d40648c920b38c1e898745ee9c49d532837ce22896d090bdc5dc82d496a778ce5fedd3fb77b241074be6c26960676592a189279c50ae0f0cdc1c3a84f6046da
-
Filesize
1KB
MD5638510f8f21116ff63250ca54b052341
SHA128a335de398dd5d8151ae0926e1245df14a595a4
SHA256d1e679b1d3c0f5bec8bf92ce0f30ee57f077c667410b50fa06d14f3fd4d41a6c
SHA512440be2b8c5af2a5d0290a06966cd50f7f17a823f0da94daef039c3685efaf61ae57ec40fddcabecfefdedb7802d2f4af615076080f2cd869c8ac464a2980b33f
-
Filesize
1KB
MD5b102a61964ebe1dd19bb01de03e068df
SHA11a01db46741687ae5df933e806e712df8ab9927e
SHA256d202b26b5e9d4f227b2b4c2ce50c8c1171803199bcf83bbaa8c2c8c7c98fa619
SHA5123da2a8d8951ab0b87080a53116c86c9acf248d17014cb32955e4ddfd9bd36f1788a6c1e6aaf9c544ab999975b8b8757b9f6709194f1aafaf946e98d9d3ea71c6
-
Filesize
2B
MD5f3b25701fe362ec84616a93a45ce9998
SHA1d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA51298c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
15.8MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
15.8MB
-
Filesize
15.8MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
15.8MB
-
Filesize
15.8MB
-
Filesize
2.0MB