Analysis
-
max time kernel
41s -
max time network
49s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
01-07-2024 19:09
General
-
Target
1c2b17a2e6615c1798e0082882432905_JaffaCakes118.exe
-
Size
3.1MB
-
MD5
1c2b17a2e6615c1798e0082882432905
-
SHA1
506168f5d220ab29811b1c439e933be01624541d
-
SHA256
d63863a9110205b94821943c6cfad8e233a393903e0e0b375269e8a4c7bde994
-
SHA512
de5c334cd43d63b21ad836554435996deac850cd6d4f6a7515f309c05a31745524bf145fd9faff6c29f3e22cf33e08515803c3c8c6fd233e495de08fc93365eb
-
SSDEEP
49152:TYhwXCrOM5b7vo8r6iN5jPgLbAfARFW99xmOYQKR6KV8K1lfkqQW6pt:M+w3rrNhcAfARw2QK8g3Ct
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1c2b17a2e6615c1798e0082882432905_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\1c2b17a2e6615c1798e0082882432905_JaffaCakes118.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Roaming\Thinstall\YouTube Download Studio 2.5.1.0\40000013200002i\youdown.exe"C:\Users\Admin\AppData\Roaming\Thinstall\YouTube Download Studio 2.5.1.0\40000013200002i\youdown.exe"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7KB
MD518699d0c237170867365d0150cefaa8c
SHA1db390e8beae5a7397ef53c68bafcc833f94f9935
SHA256aa75de7de991e8f5e38c3789e2510340b2bafea6f9ea8dd00ef10ecb46f48994
SHA51237417fc38c4f80dac6406e3652bde4ef02454151d9499fcfbacb738f941285f37c5ce209008612806a04ddebd74c01e5b419190bc725edbbc9bc7d19da4e7270
-
Filesize
36B
MD5155a5b4cfa34cf250a864a96087a8e54
SHA1907927ec80265e8713d352d8754d79ca0a746327
SHA25624797ff742afe1d27d94ac032a24db61e202f1886cef7556fb17aa6f692db5c4
SHA512260c74386e6cd42eea9a627ca1cd8c86af9e0895b565457b661d68e6b784afe5dbc94f27ecb735c685b604dbce27443eafc0050a8b2716f261a88c1626187300
-
Filesize
4KB
MD59c86a0231ccbeb7f48b73a58952a1b5e
SHA16d52c5270f137dc6432c3a3fed7c35f0c1191f93
SHA256d76e617a32d9cdf1d6f9a2208c2d20a5bba1ebf78ed8b2af0c6c0bfd101ad5e6
SHA5126164e6075230c4fb430e3ea0061bcce5ab59a34c620925a52df5a66b31963202507be51d4d01c415e460c6d924c4df9548569fcf01605472bdc5a6ae383abc24
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
488KB
-
Filesize
76KB
-
Filesize
1.4MB
-
Filesize
144KB
-
Filesize
908KB
-
Filesize
5.7MB
-
Filesize
24KB
-
Filesize
1.2MB
-
Filesize
276KB
-
Filesize
1.6MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.2MB
-
Filesize
1.4MB
-
Filesize
64KB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
1.2MB
-
Filesize
1.4MB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
1.2MB
-
Filesize
4KB
-
Filesize
276KB
-
Filesize
1.4MB
-
Filesize
64KB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.6MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
488KB
-
Filesize
144KB
-
Filesize
24KB
-
Filesize
5.7MB
-
Filesize
1.4MB
-
Filesize
908KB
-
Filesize
1.4MB