Analysis
-
max time kernel
145s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
-
submitted
07/05/2024, 19:47
General
-
Target
217644f5eb50fc0b8be098cbe3875a22_JaffaCakes118.rtf
-
Size
8KB
-
MD5
217644f5eb50fc0b8be098cbe3875a22
-
SHA1
ab0b0d0d4d16690bb559704a716203e58506143b
-
SHA256
b05ca37ad6339c364fa37a9a1bbc1bb5f7acf191882310c702813b55d1d5e339
-
SHA512
bec647ae1f76b3797aabeab383019b6e8257da7b829506be88c5854b0c111efc8191d4e7d7c2919ab7b28bc46dfbacad449bc43a83a42d0086d576d822afb9d2
-
SSDEEP
48:Mp54iWuutGfEjNMtvbDSj3xMa2763eYphyD9LhQQQzQUAUxNhHb11gb90RCZNy7Q:MwuUG5VoWxmuMyRFVS1E9fNDHy4h/1Nv
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of SetWindowsHookEx 7 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\217644f5eb50fc0b8be098cbe3875a22_JaffaCakes118.rtf" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
162B
MD5975b76e8e77d57cc386af977a08b1e31
SHA1cf893a58ef1a0f4a2f0ad3fe3a241c0c5bbcafa6
SHA2568d80e9b9b39cd00f3bfadb3b2538dc46845fe8d0e7854d5dd9c9c381150dedad
SHA512751eeec3defdc919d4afa72ca90df87649007cf189d5a6bb397a77a339cbd080f1203a67e37325e498375ae5838bb4184a00d4f2c0bff359c33e7f626d782e1c
-
Filesize
245KB
MD5f883b260a8d67082ea895c14bf56dd56
SHA17954565c1f243d46ad3b1e2f1baf3281451fc14b
SHA256ef4835db41a485b56c2ef0ff7094bc2350460573a686182bc45fd6613480e353
SHA512d95924a499f32d9b4d9a7d298502181f9e9048c21dbe0496fa3c3279b263d6f7d594b859111a99b1a53bd248ee69b867d7b1768c42e1e40934e0b990f0ce051e
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB