Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
-
submitted
24/06/2024, 17:35
General
-
Target
09e12449885edc41305d2a42f4f95742_JaffaCakes118.exe
-
Size
188KB
-
MD5
09e12449885edc41305d2a42f4f95742
-
SHA1
383d533d13db70e59b92164ed03c1f344f2bad3c
-
SHA256
9f398baea13fa0e144f5c19cc511b0fa79bf36bbe506486d1b8f14beb398235f
-
SHA512
28431fa08597aafbbc3984bfbb0fad3d3d68d918b390ae5b5f3e3912e9f54cde6da0e285f82065b1ed7d14896a4a0ca075b11515ff7ca4b2a306903d5f661fd6
-
SSDEEP
3072:8dUIpnVMvKbFbw+IcbN5qZOH9yQXxUte33Dp/Br/dA6R:chFYcbJ7kenDbS6R
Score
6/10
Malware Config
Signatures
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious behavior: EnumeratesProcesses 12 IoCs
-
Suspicious use of AdjustPrivilegeToken 5 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\09e12449885edc41305d2a42f4f95742_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\09e12449885edc41305d2a42f4f95742_JaffaCakes118.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
4KB