Analysis
-
max time kernel
147s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
24/06/2024, 16:42
General
-
Target
09a983c85fcd93eff141dc458368f9f5_JaffaCakes118.exe
-
Size
312KB
-
MD5
09a983c85fcd93eff141dc458368f9f5
-
SHA1
8d3f3bea9db38cf793a98642d77f89b07abebef2
-
SHA256
31af691708c12e49b84ebb3d2bf9e51e790ae78e277ecc7a7527b5c9ef6348e8
-
SHA512
8ac58ce9612ca78daaef326977589cceb50dc7540ff21c88706b5f06bb079ff3b7ed613a1f967ab7ec09cf10bb14cc639fd8f798cb28b6894975ab6a4506ad38
-
SSDEEP
6144:ATcHIKDss8DWBaGi8Dk8CNe/QebY1vW1SR:poKDz8asiDZbIe0/R
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 11 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\09a983c85fcd93eff141dc458368f9f5_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\09a983c85fcd93eff141dc458368f9f5_JaffaCakes118.exe"2⤵
- Suspicious use of SetThreadContext
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\09a983c85fcd93eff141dc458368f9f5_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\09a983c85fcd93eff141dc458368f9f5_JaffaCakes118.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
312KB
-
Filesize
8KB
-
Filesize
312KB
-
Filesize
312KB
-
Filesize
312KB
-
Filesize
312KB
-
Filesize
312KB
-
Filesize
312KB
-
Filesize
4KB
-
Filesize
28KB
-
Filesize
34KB
-
Filesize
36KB
-
Filesize
36KB
-
Filesize
36KB