Analysis

  • max time kernel
    42s
  • max time network
    53s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/07/2024, 12:51

General

  • Target

    1b5e577932a01655f206e89a71053be7_JaffaCakes118.exe

  • Size

    634KB

  • MD5

    1b5e577932a01655f206e89a71053be7

  • SHA1

    db5a2b6b7582c8e8f97daa66b0dfe9f545d199e2

  • SHA256

    8f070e12b066879bc61213a71b4b0f36d38f072df69bfde1f27c8f6d194e996b

  • SHA512

    ed89177826df2904770825a2f6ef584757eb4e62d1eb8add9b79cc18801172df924cc0174fd7bb83587ec291d3000d2c6c1f0d93d334115d7d57d49f12495dcd

  • SSDEEP

    12288:VgFSwg7hWWm8PS21w7JY8AMnRzOl4eGtAoziUTHA21LZph8:VgNkhWWm8PS21uJY8AqzOl4eGriULt1q

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1b5e577932a01655f206e89a71053be7_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\1b5e577932a01655f206e89a71053be7_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4580

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads