Analysis
-
max time kernel
141s -
max time network
145s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
26-04-2024 21:14
General
-
Target
01acef9c7985d9cea7858b3b0b63fab4_JaffaCakes118.exe
-
Size
689KB
-
MD5
01acef9c7985d9cea7858b3b0b63fab4
-
SHA1
0e8cfc9287dba1faae7da5acf6f2e8594b0af097
-
SHA256
195509e9c7b2eb2af89613a32c1b6084922e792cfa0c08fe9fa0af4d99754316
-
SHA512
62a10756a5a7419d0a40c73aa7b5071049df0a64bb08ac26bca76b5f6bc5723a769b9c948e1e88d32de7f0789314bfed68a6f1b09fb6c1eb1c5c1a4996c59e0b
-
SSDEEP
12288:58kXvhHjhZhUbnokPo6+hfeUjKTw07n2D29Eip1hEZFvXFWF5TzQl3Mgm:5NF7Usk/Okbj2q9/8r0bzeMf
Malware Config
Signatures
-
RunningRat
RunningRat is a remote access trojan first seen in 2018.
-
RunningRat payload 5 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\01acef9c7985d9cea7858b3b0b63fab4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\01acef9c7985d9cea7858b3b0b63fab4_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
36KB
MD528da01b5d644d29e24aa88686428f249
SHA19317904ca8cfef9cb2e75d6309d2db3eb0780fde
SHA2562477839f9e9e0f8412478486b43ad3f02588c891f4cdce146390cb6ad9e926ce
SHA5122fa6c8f7c39cca1981cf0b8c1441087990197fe3d83595c1d8a6430a90623a6a2448580fd8023c07b3db64f880e56daff11b25879470fad00e75b899f55b0da3
-
Filesize
756KB
-
Filesize
756KB
-
Filesize
60KB
-
Filesize
48KB
-
Filesize
756KB
-
Filesize
756KB
-
Filesize
756KB