Overview

overview

6

Static

static

3

15ea24d4ae...18.exe

windows7-x64

6

15ea24d4ae...18.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    27/06/2024, 11:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    15ea24d4ae84f3274b06c86e40fcebce_JaffaCakes118.exe

  • Size

    20KB

  • MD5

    15ea24d4ae84f3274b06c86e40fcebce

  • SHA1

    b7e95850e904728ce08b57d0c764818c01b06f2a

  • SHA256

    6947879715ff2a99af9331cd21a260dd3fd2f145593d5402453ac3b092e9df5d

  • SHA512

    51180651dd42cb038ba614f7e2ffcd8fac456ce73825d9ea71fac6e91c130055c0e820735b551a10b52590a550e5cc580f43f00252902036941724856eec0944

  • SSDEEP

    384:/TwetQ19DtFuBlyvp8p30sIEu2CLQAw8QEc:/Uet6guCxIEu2CLQAwu

Score
6/10
persistence

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Drops file in Windows directory 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\15ea24d4ae84f3274b06c86e40fcebce_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\15ea24d4ae84f3274b06c86e40fcebce_JaffaCakes118.exe"
    1⤵
    • Adds Run key to start application
    • Drops file in Windows directory
    • Suspicious use of SetWindowsHookEx
    PID:1168

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads