432e3b8ea67ebd521888f380e92c79919e9730c0157811d2b32088b0f8389b28

Analysis

max time kernel
122s
max time network
128s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
04/07/2024, 23:31

Target

26a37aded71c215334812dccf88f5518_JaffaCakes118.exe
Size

40KB
MD5

26a37aded71c215334812dccf88f5518
SHA1

52422a95af810780d0badcd86b64341ad1d35557
SHA256

432e3b8ea67ebd521888f380e92c79919e9730c0157811d2b32088b0f8389b28
SHA512

55ace885410b3a8f69961bbc4dff2a5710c1b7683e0de7d7b2fa2081ebf10157dcf57e312318e125cd35c6aef2470d48e34eb2add6eaa6780c26ec47bd0b1ce1
SSDEEP

384:STYbtySFjmqWJkzyrDuyCbP1+OWVCfTY5c:Ssb7mvIynbCbN+O4CfOc

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1412	26a37aded71c215334812dccf88f5518_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\26a37aded71c215334812dccf88f5518_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\26a37aded71c215334812dccf88f5518_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1412

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact