c082fd49d6c23dd5f14092ee09c892d1cd4b2680ca77e840bec7235b4d3173a9 | Triage

Analysis

max time kernel
150s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
26-04-2024 08:19

Sharing

Report Analysis Logs

General

Target

005bf7a83a5e36fe0b6c6c5b4ec50746_JaffaCakes118.exe
Size

52KB
MD5

005bf7a83a5e36fe0b6c6c5b4ec50746
SHA1

48f3bd41c5cc7d45df564c200f1d07e1c8b50904
SHA256

c082fd49d6c23dd5f14092ee09c892d1cd4b2680ca77e840bec7235b4d3173a9
SHA512

7ec4e8c9e0ceb9f2c483bb490fb8c5a062bf053cb56b8b34fed882e518b731f2ced328bcf6fde1144294a385fdec19a1f803204f53626d151f47fb40f715bb4c
SSDEEP

768:/Xt/WQU3E4wWXlUS0SK5u8DyCWJVBd5Sfs:/JaHVKvWVdH

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2224	005bf7a83a5e36fe0b6c6c5b4ec50746_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\005bf7a83a5e36fe0b6c6c5b4ec50746_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\005bf7a83a5e36fe0b6c6c5b4ec50746_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\CloneF_4.exe

Filesize
52KB

MD5
24a1d99b7a02e5fdc355d3c1d8270b49

SHA1
5c3232f828dca8cbdc180ab9163107827014dca2

SHA256
999f5bf391f103b4b65645cdbd4d8e611c7368033be23dbb5b83e3af6d44f60c

SHA512
983eb8bc9724f32c020fa2a3b5c43dcb2c2d04074c79a203b89719159f8150ae79e2d44f59c7c9dceb19ef97190c271a32a9b44e157d1e7256ad390b3df9cfc2

Download Submit