fd15a90fb80caa722a090de14c451c767d25b2cf88f896336ec380527957d7e4

Analysis

max time kernel
134s
max time network
104s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
21/05/2024, 10:18

Target

62f009770bc4aabb994b24898d8cebf0_JaffaCakes118.exe
Size

8.9MB
MD5

62f009770bc4aabb994b24898d8cebf0
SHA1

fa957a0b59d974cd9a49161fd1774789334d96ef
SHA256

fd15a90fb80caa722a090de14c451c767d25b2cf88f896336ec380527957d7e4
SHA512

f7b66a78811240de53d1f3a5f0f855226a706af03785cdedfc99173d748fc2a469fcf8f1f5671dbbbaf33fc66fe1c56166b7a0b52769d67602b1d10255b0e857
SSDEEP

196608:De7Tgcmco4HiGIhrN/jtOZtyPPyxBEPfte:EsMDIhp7toceBWte

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
768	62f009770bc4aabb994b24898d8cebf0_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\62f009770bc4aabb994b24898d8cebf0_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\62f009770bc4aabb994b24898d8cebf0_JaffaCakes118.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:768