Overview

overview

5

Static

static

3

21d89a8753...18.exe

windows7-x64

5

21d89a8753...18.exe

windows10-2004-x64

5

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    03/07/2024, 09:22

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    21d89a875351112153207e1ffc2b0eb9_JaffaCakes118.exe

  • Size

    208KB

  • MD5

    21d89a875351112153207e1ffc2b0eb9

  • SHA1

    a745c838d6b54951683f785953bf66d279bc5195

  • SHA256

    810390c33949340742683d9c2bb17a17a0a04016c262977106bedbdca0b5a867

  • SHA512

    3b1dd0092313e4c5dd0c878aaf46dd4e5378b711c6a543bccba2826d31ce77b3d3d3d391b61b76925034e697359ccd4baa7f8c8d14eb75915ddd3c950014eeec

  • SSDEEP

    3072:Ig32mMEwtjZgq5xeMUPU50pWlw9nFB/hOvRLjLab4MWfYTSoSoBTPzrc77OWw8xF:IywtF75xedU5of9F8m4otzc769/c

Score
5/10

Malware Config

Signatures

  • Suspicious use of SetThreadContext 1 IoCs
  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\21d89a875351112153207e1ffc2b0eb9_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\21d89a875351112153207e1ffc2b0eb9_JaffaCakes118.exe"
    1⤵
    • Suspicious use of SetThreadContext
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1796

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1796-2-0x0000000000400000-0x000000000047D000-memory.dmp

    Filesize

    500KB

    Download