Analysis
-
max time kernel
141s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
04/06/2024, 12:10
General
-
Target
94caaef3fab16d2255e17092efc2b3e3_JaffaCakes118.exe
-
Size
176KB
-
MD5
94caaef3fab16d2255e17092efc2b3e3
-
SHA1
139859788900cfb414d1a3b5e37bccbba0ed19a8
-
SHA256
0364863bcb59ec7bb774227cf04662658843a9197f811faf394c1b39398a3f18
-
SHA512
43a14018b92b4745ffe78d355338a957cfe047573d5f695667bf6f370073862dff4c7f13beda8937187f68a43243932104b8e2608906dc22eff6ef4638e49c87
-
SSDEEP
3072:zLmlPeexq/VZqi5QJrURNw2duBoUiZl+8QhJ4higMu9/ZkjcxDe/:WlPVc/yJrURNuSPf2J4EgMu9/ZkjZ
Score
10/10
Malware Config
Signatures
-
Remcos
Remcos is a closed-source remote control and surveillance software.
-
Drops startup file 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\94caaef3fab16d2255e17092efc2b3e3_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\94caaef3fab16d2255e17092efc2b3e3_JaffaCakes118.exe"1⤵
- Drops startup file
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.1MB
-
Filesize
92KB
-
Filesize
196KB
-
Filesize
92KB
-
Filesize
92KB
-
Filesize
196KB