Analysis
-
max time kernel
149s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
01-05-2024 10:52
General
-
Target
0b9b3f5e259b37dcf77e363f08ba7557_JaffaCakes118.exe
-
Size
1.5MB
-
MD5
0b9b3f5e259b37dcf77e363f08ba7557
-
SHA1
c961d18be1e511100365a87a83351cb971d7cdfa
-
SHA256
241fa7966b60b5f967d0a8d5e4e2d0d072054060c3de59731285e3b48e2c1805
-
SHA512
f0a94c97dda08799740de77d689eee6cf07a6ede21ef729c144f1526a0d79a930adba44e575b10abe3fbc236189273b2239fec28e94cf3edfa1f2c353d7c1d54
-
SSDEEP
49152:kjbVJz32/o0JM1Sku6w49RWeWmeJyJC6ssxyziL+3lqJZk:ub3z3GG9RWeHyOL+1GZk
Score
7/10
Malware Config
Signatures
-
UPX packed file 16 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0b9b3f5e259b37dcf77e363f08ba7557_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0b9b3f5e259b37dcf77e363f08ba7557_JaffaCakes118.exe"1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.9MB
-
Filesize
4KB
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
4KB
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
4.9MB
-
Filesize
4.9MB