Analysis

  • max time kernel
    150s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25/06/2024, 20:27

General

  • Target

    0f6a5452bbb3b1d19ed2ee407fc2c7ed_JaffaCakes118.exe

  • Size

    54KB

  • MD5

    0f6a5452bbb3b1d19ed2ee407fc2c7ed

  • SHA1

    aa15ebbb09ebed8fa994b7b06e964023ce108f7c

  • SHA256

    48befdc6c0b1175ee7e48ed7150539158928490fe52bbcadc57fc25bfbadc8a6

  • SHA512

    26be041742c4cb5435f46a2ebf10012da855405233d6f6dba20dc5856e07673394537a67b2e909709007f05c91cc3738f8005d3e5771e0257629ab3af0803bac

  • SSDEEP

    1536:L9eKYNHAtiPatEHlmX7g+Pe7OapKV62aj:LU1NHAgCt0lmrpqOaQVNaj

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0f6a5452bbb3b1d19ed2ee407fc2c7ed_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\0f6a5452bbb3b1d19ed2ee407fc2c7ed_JaffaCakes118.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1952

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1952-0-0x0000000000400000-0x0000000000432000-memory.dmp

          Filesize

          200KB

        • memory/1952-1-0x00000000002C0000-0x00000000002F2000-memory.dmp

          Filesize

          200KB

        • memory/1952-2-0x000000000040C000-0x000000000040F000-memory.dmp

          Filesize

          12KB

        • memory/1952-3-0x0000000000400000-0x0000000000432000-memory.dmp

          Filesize

          200KB

        • memory/1952-4-0x0000000000400000-0x0000000000432000-memory.dmp

          Filesize

          200KB

        • memory/1952-5-0x0000000000400000-0x0000000000432000-memory.dmp

          Filesize

          200KB

        • memory/1952-6-0x00000000002C0000-0x00000000002F2000-memory.dmp

          Filesize

          200KB

        • memory/1952-8-0x000000000040C000-0x000000000040F000-memory.dmp

          Filesize

          12KB