Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
17-04-2024 04:34
General
-
Target
f50b7ea32dc1e72bbbf7db915f2af3c6_JaffaCakes118.exe
-
Size
68KB
-
MD5
f50b7ea32dc1e72bbbf7db915f2af3c6
-
SHA1
34edee498dc9b14921a31a4bc339441d1ed93dc9
-
SHA256
b7471f9327cbcbd227d524c0965a6c9ba988491fdc3effdb4c46774fc8d8bb90
-
SHA512
54777c26d524d93837ec9312ffeeab98a2e47f1f3b61d25313f13ade75bcf6318a13d48c5c4dd83d4393b7d1de2052cc5337138ecaf042b5fdb3309b47b9400b
-
SSDEEP
768:MJQHPngEug8ZCzkDr4rEeznrLXpoBFYcXh3hnC3JfyKkzjNdQJpdE/:gQHDWCzkX4rvNo3YcXvC3JfEPQ7dc
Score
7/10
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\f50b7ea32dc1e72bbbf7db915f2af3c6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f50b7ea32dc1e72bbbf7db915f2af3c6_JaffaCakes118.exe"2⤵
- Loads dropped DLL
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9KB
MD50adb6f82125d3cb830a532da154677f0
SHA1b1abad527ee1ed71bd4f00e1bb01214185398efb
SHA2563449618ca5da3813402d38b8890462af1c90d8a991583e4c0492c3a81b60f425
SHA512199060e350c1101f138d6b2151fc465e930eed495af77aaeaab837b10ca6d1fc113e32be51b5abe9b9d6c00dc73edf2d80ce720e99aabb8cd60ceae458c640fc
-
Filesize
4KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
4KB
-
Filesize
16KB
-
Filesize
16KB