Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
20-04-2024 21:31
General
-
Target
fdb125672d1f4eb136624b366f6029c8_JaffaCakes118.exe
-
Size
24KB
-
MD5
fdb125672d1f4eb136624b366f6029c8
-
SHA1
5a4fb6586208808470ed44e98377adceb3633798
-
SHA256
198277bf2d3e7c4f9670d9882a2a5840ca9eceeb12e49ee0d025b4ff48d52672
-
SHA512
fb37a638de0faa39e3469098519fe9e6813dfc4723feb9dfa53525988e063c9baabc532905f89da86b210926827a661e8fbd168bfcb62e22ecb4a9923e73051b
-
SSDEEP
768:ZFPzglz8BQt44gAABfJ0Bs17s9nvv7PQxS:ZFP444gAA12Ks97PES
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Modifies registry class 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fdb125672d1f4eb136624b366f6029c8_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\fdb125672d1f4eb136624b366f6029c8_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
32KB
MD5be8a666a5f0f2ea55d490b8478057051
SHA145536fb6f11e02c2a8f53fdf7b677b2f9b1fa5bc
SHA256ae9298d542b6d135e73fc247cb13aa794ee9f047421694526a59b77210c710e6
SHA512502e160aaeb57cf67516bb1a2401f5d8f602d0ad6a9bee8cd248d6df66b313e7112b6181ba25030dfbcc0ecc7f884147b38a2d713709b1f15d4cd74d5261d62e
-
Filesize
112KB
-
Filesize
72KB
-
Filesize
112KB
-
Filesize
72KB