1eafc7252b2693b929385517597582b3c89d565c7d4a98146543a9e28747e66e | Triage

Analysis

max time kernel
143s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
28-04-2024 18:45

Sharing

Report Analysis Logs

General

Target

05d78ff1407552fa89e5102387cc61b8_JaffaCakes118.exe
Size

153KB
MD5

05d78ff1407552fa89e5102387cc61b8
SHA1

6dffcc27a7503a6f283febe9a4ce84862280430e
SHA256

1eafc7252b2693b929385517597582b3c89d565c7d4a98146543a9e28747e66e
SHA512

d3d722acba60b5e91b009586a001cf5822565724e5d20036b006ec0ab1ad6da89383354d0f63c410bab5cea204f1ecbf43f7a30a88706d104264f32ef6c675cd
SSDEEP

3072:kgc8rqLjuK+cLSLFbie/kY418GtFS4g+Q:urHuRLP0L0

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1780	05d78ff1407552fa89e5102387cc61b8_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\05d78ff1407552fa89e5102387cc61b8_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\05d78ff1407552fa89e5102387cc61b8_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1780

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4032 --field-trial-handle=2900,i,14549994492153927475,12895178890800740987,262144 --variations-seed-version /prefetch:8
1⤵
PID:4420

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1780-0-0x0000000000400000-0x0000000000421000-memory.dmp

Filesize
132KB

Download