d6d3a6df823e2d0d906472fa2b57445868d5498f745a56c12f79f801254b45b0

Analysis

max time kernel
119s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
03/07/2024, 17:57

Target

234362cb607853f665d53f2dabc68279_JaffaCakes118.exe
Size

38KB
MD5

234362cb607853f665d53f2dabc68279
SHA1

2f9f69c63345913c83831a5acd6762e67442d429
SHA256

d6d3a6df823e2d0d906472fa2b57445868d5498f745a56c12f79f801254b45b0
SHA512

92d2c379304426e39726423cb65b9fb54db34f68e37eaca3850b8566893cb7dec9d970a77e702d7a0ca48f9d2fdc3b80468559d089c201124c5e3dc26c995fc5
SSDEEP

768:X6YY6wi63F7rx/auJSAKdwA1NzhZiQCMVLC8:XrRwZ4aA1dhZiQCMVz

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1812	234362cb607853f665d53f2dabc68279_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1812 wrote to memory of 2380	1812	234362cb607853f665d53f2dabc68279_JaffaCakes118.exe	28
PID 1812 wrote to memory of 2380	1812	234362cb607853f665d53f2dabc68279_JaffaCakes118.exe	28
PID 1812 wrote to memory of 2380	1812	234362cb607853f665d53f2dabc68279_JaffaCakes118.exe	28
PID 1812 wrote to memory of 2380	1812	234362cb607853f665d53f2dabc68279_JaffaCakes118.exe	28

C:\Users\Admin\AppData\Local\Temp\234362cb607853f665d53f2dabc68279_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\234362cb607853f665d53f2dabc68279_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1812
- C:\Program Files\Internet Explorer\iexplore.exe
  "C:\Program Files\Internet Explorer\iexplore.exe"
  2⤵
  PID:2380

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact