Overview

overview

7

Static

static

3

3023150f75...18.exe

windows7-x64

7

3023150f75...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 17:04

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    3023150f75ba0d50a5bd5cef22c75819_JaffaCakes118.exe

  • Size

    1.3MB

  • MD5

    3023150f75ba0d50a5bd5cef22c75819

  • SHA1

    f838b26291bfda39ccc750750d662ba044bb5e7b

  • SHA256

    8c533d0b7a1646d607df03c127674d22580f37eda9aa734cff3456ccca38e553

  • SHA512

    a246d58bac768343be83f4f3938054938cda4e11144295ca28b7d79ecc8f6c20a4a3bdbf17b3849277b776cca27a38e934695dd90aef19537620bd745fd4bf15

  • SSDEEP

    24576:0N0GwyBuP3nClQbhuaVab2FzUqh6v5BunN4EcSZnz+FbLdY:8FwyBuPSlqhuaVab2Fzd6fI49FbLdY

Score
7/10
spywarestealer

Malware Config

Signatures

  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3023150f75ba0d50a5bd5cef22c75819_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\3023150f75ba0d50a5bd5cef22c75819_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2748

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\bottom.jpg
          Filesize

          244KB

          MD5

          0591afc40d8bd41b181d5146c0e6a09c

          SHA1

          c4026d1ac3ac27ebc346449293143aed31e5b4b5

          SHA256

          32a630f1098561b3ddb2eca520f271ed1d05b2601e9b222c781d454848d96ad3

          SHA512

          88e8237d7b216e7ee41a0f185f7e753ddec77b30b08f3341100d0f7c54dc1d3040018162faee9c091490da0fb463131538b738cce8937f00cdad3137f8f21e97

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\header.jpg
          Filesize

          3KB

          MD5

          1fffd38bcbcddd52c8f171812c897e14

          SHA1

          753f8226acab4970537358973d3aa9cff789617a

          SHA256

          e065105abe1d41c492e6097958e497cbf120589122d15c04a0791c30f63a770f

          SHA512

          b092d5e2ca6623a2875b8e9005a27c189cc2ac6cdf7815f4da179d253ac0419a7ae16e96f9357b09655b843d9d71842a94d9faa62415d74df3b2bc0b643e7a8d

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\side.jpg
          Filesize

          120KB

          MD5

          422d231d075e34c071a12bef00e8ff59

          SHA1

          fc64c81795cbf1ff125146b1cff0fe02bdf55a7a

          SHA256

          da21e4b1de8ae12a4f49b72954f8c6416ed09075ab777143baba68fc75f9e366

          SHA512

          8e08da11248d64b82b69e90162b4e68c40ea2f9678f3a21e7d6652f5e380ae78761a430248d560c6fc66a5983c2eca06fe192dc6aac0ff2698801062ce3ce3dc

          Download Submit