Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
-
submitted
17/06/2024, 04:06
General
-
Target
b6ac80103c914ebaaeaedb6e89a95a0c_JaffaCakes118.exe
-
Size
757KB
-
MD5
b6ac80103c914ebaaeaedb6e89a95a0c
-
SHA1
c7feb34dfadd7b7470716cf5fa047d7305ed7e8f
-
SHA256
1003c12b098b6394c4c65fe99a2c64e80d0fc2ec0958344f621ca1895343d6bb
-
SHA512
23bf045edb4867f4c92cf1bf476aac271956dd2534cc6ed5efdb5130e59921f557fd8dac76753f82760090019597be158ca285dbabf789e17df78b6729e266cf
-
SSDEEP
12288:Vqcr9sBQzHiMc0usw9E7uTnXBN2p5opOEte9fzz9dunrpONsAozZX1jqJiqMeXnE:Q+OYCXbsw9EsG56l0fzZ8rpvASZX1+J0
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b6ac80103c914ebaaeaedb6e89a95a0c_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b6ac80103c914ebaaeaedb6e89a95a0c_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\setup.exeC:\Users\Admin\AppData\Local\Temp\setup.exe relaunch2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
757KB
MD5b6ac80103c914ebaaeaedb6e89a95a0c
SHA1c7feb34dfadd7b7470716cf5fa047d7305ed7e8f
SHA2561003c12b098b6394c4c65fe99a2c64e80d0fc2ec0958344f621ca1895343d6bb
SHA51223bf045edb4867f4c92cf1bf476aac271956dd2534cc6ed5efdb5130e59921f557fd8dac76753f82760090019597be158ca285dbabf789e17df78b6729e266cf
-
Filesize
2.4MB
-
Filesize
2.4MB
-
Filesize
2.4MB
-
Filesize
2.4MB
-
Filesize
2.4MB
-
Filesize
2.4MB