Analysis
-
max time kernel
140s -
max time network
51s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
27/06/2024, 14:21
General
-
Target
1651f68f285101f96c64a720644045ad_JaffaCakes118.exe
-
Size
16KB
-
MD5
1651f68f285101f96c64a720644045ad
-
SHA1
90aa901334383f904e08f526057b5b9517f70c7d
-
SHA256
dadcd49a3df5c0790d96a9ea5b92ce2b523a1316f53bdaaa687bb94c743ba9fd
-
SHA512
2a8e6f63ee1478f4a28581e91cce3dc0ef6734c4940300ff814563b374625b4f4d3bacfe0f5d90d6a668afd58b9e6583bc3da81614a2ed976e5c24f0c86c6ca6
-
SSDEEP
384:vUX56fy6Qmrmqq+e03wwK+b8GvJiS0TtmJuTWAud7VwH07X2:vUgBzrmq5e0gwKYrIZSZX
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1651f68f285101f96c64a720644045ad_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\1651f68f285101f96c64a720644045ad_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
25KB
MD5ee90c64b3bb64765402ba4ea451b40db
SHA1cf59bdbdbab2c3d4a87748ae140fe121b3cb3a1e
SHA256c35495f800675b2f44999ee48e92e50fcac27d22449ea482d3339d5220387cba
SHA512b40c400e60e8a1b97c1ee594d0d97083fe400951fb18cc922f4731622d0ecc3e9c9cbe9611701089237fe6998fda771a047c60dacd69f4d5560522fc0b57b6aa
-
Filesize
56KB
-
Filesize
56KB