dd38af81e9691c82eb00aeda2d6deb453f7420ebb74b42eb116acd95c2c784fb

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 01:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a364c2f988e90d54454f47fba72e6a62_JaffaCakes118.exe
Size 659KB
Sample240613-b1992atark
SHA256 dd38af81e9691c82eb00aeda2d6deb453f7420ebb74b42eb116acd95c2c784fb
MD5 a364c2f988e90d54454f47fba72e6a62
SHA1 b685ae8e34f21c2183d2a9d6487087cd418ee9e4
SHA512 02ae82fb9edb4eb9687a7b1d0e32c28134f08cdf147e94d3904cba5a3552053f98cdf80dc0b9daea0eaae5adc0ecfcbe60d387f842d6691b008989e21bef85ff
SSDEEP 12288:rAyvpfnHq+NRkqR+RqgHvpRdEzWmLLuLAkyUyaAGY5OKCy5Z5DePzqh545+aXh5d:syv5KAeqR+RqSHdEzJmfJixOKCy5Z5DI
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 9 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/1608-2-0x0000000002140000-0x0000000002286000-memory.dmp	upx
behavioral2/memory/1608-5-0x0000000002140000-0x0000000002286000-memory.dmp	upx
behavioral2/memory/1608-6-0x0000000002140000-0x0000000002286000-memory.dmp	upx
behavioral2/memory/1608-109-0x0000000002140000-0x0000000002286000-memory.dmp	upx
behavioral2/memory/1608-110-0x0000000002140000-0x0000000002286000-memory.dmp	upx
behavioral2/memory/1608-111-0x0000000002140000-0x0000000002286000-memory.dmp	upx
behavioral2/memory/1608-112-0x0000000002140000-0x0000000002286000-memory.dmp	upx
behavioral2/memory/1608-113-0x0000000002140000-0x0000000002286000-memory.dmp	upx
behavioral2/memory/1608-154-0x0000000002140000-0x0000000002286000-memory.dmp	upx

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1608	a364c2f988e90d54454f47fba72e6a62_JaffaCakes118.exe
1608	a364c2f988e90d54454f47fba72e6a62_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\a364c2f988e90d54454f47fba72e6a62_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\a364c2f988e90d54454f47fba72e6a62_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1608

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

bootstrap_47524.html

Path C:\Users\Admin\AppData\Local\Temp\ish240594953\bootstrap_47524.html
Size 156B
SHA256 f076773a6e3ae0f1cee3c69232779a1aaaf05202db472040c0c8ea4a70af173a
MD5 1ea9e5b417811379e874ad4870d5c51a
SHA1 a4bd01f828454f3619a815dbe5423b181ec4051c
SHA512 965c10d2aa5312602153338da873e8866d2782e0cf633befe5a552b770e08abf47a4d2e007cdef7010c212ebcb9fefea5610c41c7ed1553440eaeab7ddd72daa
MD5 SHA1 SHA512

Submit Download

main.css

Path C:\Users\Admin\AppData\Local\Temp\ish240594953\css\main.css
Size 8KB
SHA256 f5c43989fd7d7c8b03c321926ae5acd0c1981fa17e7eaaa0c850edd345d658a3
MD5 1f34626a3b3083a7d8bb853c9e4c62c6
SHA1 b363f2f5aa019af9d12857c6cab49ad51b566e1d
SHA512 4f8f67ea21a02a2f8c5f6fe4610a0ca9d3a23b69f3cbbaccff4a00c284a3629ad3adbdcb3768e386f3e9505dd67a2bad4fe1741c655d2f7c64b45531f24d14a2
SSDEEP 96:uO0FS5vMgK0f/ugOT73IuQCEjSzbpAaNtDbHN+aZM8AwupwulFeST09EWA:unFSZa0f/qzz5bHN+a2/pwujeST09fA
MD5 SHA1 SHA512 SSDEEP

Submit Download

progress-bar.css

Path C:\Users\Admin\AppData\Local\Temp\ish240594953\css\sdk-ui\progress-bar.css
Size 506B
SHA256 974cd89e64bdaa85bf36ed2a50af266d245d781a8139f5b45d7c55a0b0841dda
MD5 5335f1c12201b5f7cf5f8b4f5692e3d1
SHA1 13807a10369f7ff9ab3f9aba18135bccb98bec2d
SHA512 0d4e54d2ffe96ccf548097f7812e3608537b4dae9687816983fddfb73223c196159cc6a39fcdc000784c79b2ced878efbc7a5b5f6e057973bf25b128124510df
MD5 SHA1 SHA512

Submit Download

BG.png

Path C:\Users\Admin\AppData\Local\Temp\ish240594953\images\BG.png
Size 14KB
SHA256 351d97fcea98b32c3ea217f831e046305e6bbaf63d481de6e3adb771cd93d5c1
MD5 15b4c95b98b6a6eef7b273fec63cc8d3
SHA1 ccf4fe8d7accd596b731a7f0938c086a7230610e
SHA512 f6b0d1328f0c8ec07116416c6a50d479b166df271ce0cf481b9cc08bbed995c5ac085f14650c456e9bc99e708d6b6f2013a590ac87055350ed5ef89d03e0cb17
SSDEEP 384:fwBMXTs1sW0rEGKoltD6UPbW7bByONxrIr8k6S:2jsJO0NM9yOxrIwBS
MD5 SHA1 SHA512 SSDEEP

Submit Download

Close.png

Path C:\Users\Admin\AppData\Local\Temp\ish240594953\images\Close.png
Size 1KB
SHA256 8678b6a240aafa4bf2ff6928feba89ad92ec229540a2a2f889061b567fe37328
MD5 d65ed2e9d0bb66550d84fb6ab569401d
SHA1 0df6eedbb892a9dcf68121c92767e359b0092324
SHA512 5b3db5e33d85edb5aec7c47eb3ba1a4e2e5a31a80119bb68fd938def45e64be2b631898c84ea6602018ed2a0b1616a787b932de0632508da272866e4c83c176f
MD5 SHA1 SHA512

Submit Download

Close_Button.png

Path C:\Users\Admin\AppData\Local\Temp\ish240594953\images\Close_Button.png
Size 1KB
SHA256 37c9568fd0117037e586b743cdff334d03e01a14d1c6bbf9db3616427913a15f
MD5 b80852fc14db25942c4122e457a9c5eb
SHA1 97cb368f2fd9640a797841d66d436af55a61413b
SHA512 ccdfbab89780b2bd803060013fdf95f0955bf71401833373f81b0bbf1f4bea0ffe239be6deb442e7559e3c48e071eb326ebf6236c79ba9cba1da6172b134091c
MD5 SHA1 SHA512

Submit Download

Color_Button.png

Path C:\Users\Admin\AppData\Local\Temp\ish240594953\images\Color_Button.png
Size 365B
SHA256 6eca7c9ff5152f1f60bd6bee19cbe719ae6f7632a6b6281a89b3865810257362
MD5 abdd4ce79215e0921025714607d261cf
SHA1 19228559e3b02c15bd12a5a66b8566b2760faa56
SHA512 7eea73d23532ae612718a1ada04406b0ec12a546e356d715b88958adf4245534801c0c05a2e64a18c37ee1feb52ea2adef68aed365f0293b3c7e904e8627c01c
MD5 SHA1 SHA512

Submit Download

Grey_Button.png

Path C:\Users\Admin\AppData\Local\Temp\ish240594953\images\Grey_Button.png
Size 1KB
SHA256 5fcf1fcef7f9d970d81e3bed101b4fa14a9a770170cd133891bc4787fc5c4bb4
MD5 cb9de40388f86b42c5fc933a0e356a54
SHA1 0309e586995caec71e039cd2bdd159577b0e9f02
SHA512 2daabc183258793aa1a62bc8740b3c2c39deca93da18822609e13c550ce188e13c8b3f17224617567fe3c8d9a09ab04becaae38120f9b5383cd7fc72a69d6166
MD5 SHA1 SHA512

Submit Download

Loader.gif

Path C:\Users\Admin\AppData\Local\Temp\ish240594953\images\Loader.gif
Size 10KB
SHA256 476a7b1085cc64de1c0eb74a6776fa8385d57eb18774f199df83fc4d7bbcc24e
MD5 57ca1a2085d82f0574e3ef740b9a5ead
SHA1 2974f4bf37231205a256f2648189a461e74869c0
SHA512 2d50b9095d06ffd15eeeccf0eb438026ca8d09ba57141fed87a60edd2384e2139320fb5539144a2f16de885c49b0919a93690974f32b73654debca01d9d7d55c
SSDEEP 192:p1I+c3Va7frt67FhQ0NFg9iKCqv6/WU5UL8biGeQX9za5ZGXffWuj:3Ipazkn1NFmDCW6/WU6UN9iZGPJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

Minimize.png

Path C:\Users\Admin\AppData\Local\Temp\ish240594953\images\Minimize.png
Size 1KB
SHA256 9f297975c99fec7a5252d72263ab9da224a4f039a77bb4a15a252748a3733614
MD5 6995d7db5dfe576a1356648b99c6c918
SHA1 7433c1d1090f7b7006cea3646a51d62a06d58a02
SHA512 3a0f6a2be7bd8d1fbcc0d37b39babf8775bbcf8d9f9e4556ee41a3726a04251c497b64601585ba8b404f060c0343699429097719f472c5cc058d5168e73b8e1c
MD5 SHA1 SHA512

Submit Download

Progress.png

Path C:\Users\Admin\AppData\Local\Temp\ish240594953\images\Progress.png
Size 1KB
SHA256 f630e46db176536ff5db2464dc3107388e291be40bee1cb388dc27daa481e922
MD5 1b4b78615845f86fd9d95c6876c905df
SHA1 d4199e4d119baec3cccdfabeb9181f65051eb105
SHA512 8a2f273d5765b14054fc10e7502f3b1a696ab5829a02f3c2119ad2e23587475f55c21099e9b769c5340795f7b419a4e8f0b5db00e5d271a013becde79f9b352b
MD5 SHA1 SHA512

Submit Download

ProgressBar.png

Path C:\Users\Admin\AppData\Local\Temp\ish240594953\images\ProgressBar.png
Size 1KB
SHA256 3834424d014a0bc65a5a2751a8ef8619d8b13772410a03a6916d994089c445c3
MD5 a98a91b33fc8c1c9ddb7732c0e6b29ba
SHA1 cf84f1f5e26f510d38a1c0d7ca351e2bc4b4e55d
SHA512 55b51a08f8857660ad175daa4e8576bf3dc9cc15b767ac3450e5c5e75d7586732fd461c41be6e1eb97487bbc012e1fd9273d6c7bb7bfa35b609612e06198d9c6
MD5 SHA1 SHA512

Submit Download

Quick_Specs.png

Path C:\Users\Admin\AppData\Local\Temp\ish240594953\images\Quick_Specs.png
Size 221B
SHA256 6e6b964fd79b4a3461f128e2ed145b9b641d108b8616695f36387661cae995bb
MD5 07cd59b954e8495ad6cd6a7c11d2de86
SHA1 787aeda3eee8053705fb208a6b399b8340820b82
SHA512 0159aca0c2a49393fd91acd4b6819217e67f8fd01e220297eb3e0fdd8132fad794fc317f5cc5e2b761d4123da71478b97df776908de6740eb6d54187c6c00754
MD5 SHA1 SHA512

Submit Download

default_tb.png

Path C:\Users\Admin\AppData\Local\Temp\ish240594953\images\default_tb.png
Size 19KB
SHA256 87af4027e8f89459463bdd73df7b928b883eefb20514159d3a1a4be0d39e00c0
MD5 70e70599d4b853df0f12f6cb0e04695f
SHA1 6e3a721aef65625bf99b639800476150d262dd4b
SHA512 1efcf8af09cf857b3850cec43a88fc8c0992e3b04f78ad2c71b84c2ac7775e745df211582694588b29217aefb1ae02b29b94c2cfe52b5d32bdafb9dce73b9920
SSDEEP 384:aVEBAKMMXnVVUNlT9WRYAeFH1+Q8kd+2rcxPxV4wQZaz7G:aVEBA4XVaNlBQYAEH1+QXWV4wRz7G
MD5 SHA1 SHA512 SSDEEP

Submit Download

default_wi.png

Path C:\Users\Admin\AppData\Local\Temp\ish240594953\images\default_wi.png
Size 27KB
SHA256 9216d98a6574dfadacdc8321dc435454cb72c589b3ee8326a9b946966f756d7f
MD5 1cc2677e3e29e45e538985839cff2b42
SHA1 2dab653eb20be72b034a38dc1fcebbd18f079c86
SHA512 25575fea9abb1491b5a5853244a9b655ce05f64d98f4b79134674f2d9a560a5af405c1783c9da4a07cfb38b51d060c7a70890c70df6c1c8f4b01e041aa4f649f
SSDEEP 768:hvvZJUmrOdSen+XeaJKM/7Z8F6OKjQlxo6qBGeOVX:h3ZJBd9eaJnzZVpjQzo6XeOVX
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads