Analysis

  • max time kernel
    140s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21-04-2024 03:45

General

  • Target

    fe5a76822e83acfcae1d275a784ed848_JaffaCakes118.exe

  • Size

    229KB

  • MD5

    fe5a76822e83acfcae1d275a784ed848

  • SHA1

    0738a05b9531b7e74241070deb04fb8580ab1483

  • SHA256

    3bc605b91da7b77da7a50955f65ff4a79a71c8db05e35dad98da288e549556af

  • SHA512

    a8a86b6b5b9d039741420ef489a258c7125b578bea8b6f9aa5614e03edf7578cdb9984f6fcf9517451c7b3fa435fed73c127b77b1b4ea4f0bae17ed3bf4d6db8

  • SSDEEP

    6144:Y/C321xc8rSwUadZ17NoHXekrNshFOJcTX2GIn1LwZM8UFKb9:YSKxcgZwH9NshsJcz3Il8UI

Score
6/10

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Drops file in Windows directory 2 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fe5a76822e83acfcae1d275a784ed848_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\fe5a76822e83acfcae1d275a784ed848_JaffaCakes118.exe"
    1⤵
    • Adds Run key to start application
    • Drops file in Windows directory
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    PID:2160

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2160-0-0x0000000000400000-0x0000000000477000-memory.dmp

    Filesize

    476KB

  • memory/2160-1-0x0000000001E80000-0x0000000001EB8000-memory.dmp

    Filesize

    224KB

  • memory/2160-2-0x0000000000400000-0x0000000000477000-memory.dmp

    Filesize

    476KB

  • memory/2160-3-0x00000000001B0000-0x00000000001B1000-memory.dmp

    Filesize

    4KB

  • memory/2160-17-0x0000000000400000-0x0000000000477000-memory.dmp

    Filesize

    476KB

  • memory/2160-18-0x0000000000400000-0x0000000000477000-memory.dmp

    Filesize

    476KB

  • memory/2160-19-0x00000000001B0000-0x00000000001B1000-memory.dmp

    Filesize

    4KB