Analysis
-
max time kernel
51s -
max time network
52s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
24/06/2024, 18:40
General
-
Target
0a2fbbc987a57a78225cbe840bdaee49_JaffaCakes118.exe
-
Size
1.1MB
-
MD5
0a2fbbc987a57a78225cbe840bdaee49
-
SHA1
a3612f34aa116719c5a2c568dc32e8510673f3ff
-
SHA256
5d4d85d9e633290cc461a17d53d9fd93ae35a4c74c451bee1d5a75149b8bf6a1
-
SHA512
ee8e0f90159854a2f038abb0ee92a8f41d62620cceb150e9b650eb7d34180e61561799507edd406a2e534a7ac8d36299bc19c0eeab5f953283d4839e1c1d9f74
-
SSDEEP
24576:z0a6s5jQ6Wk9ce3uElZU63eCtdii8Q4IuZoI4xPBUCNEqZ/Em:z0ojDWQZU9s98/IT5x2xo/P
Malware Config
Signatures
-
UPX packed file 29 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
VMProtect packed file 1 IoCs
Detects executables packed with VMProtect commercial packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies Internet Explorer settings 1 TTPs 4 IoCs
-
Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0a2fbbc987a57a78225cbe840bdaee49_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0a2fbbc987a57a78225cbe840bdaee49_JaffaCakes118.exe"1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.0MB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB