Overview

overview

7

Static

static

3

241178a992...18.exe

windows7-x64

7

241178a992...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    04/07/2024, 00:48

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    241178a992fa09f9494cdfd9afe7494e_JaffaCakes118.exe

  • Size

    258KB

  • MD5

    241178a992fa09f9494cdfd9afe7494e

  • SHA1

    69a4059f92dc8b239962e613ce9749eb645e4953

  • SHA256

    8e38a6845904a102b3e4edae3cd0553b86cae9ee785b1142f4f74bc5ce3efd08

  • SHA512

    a1e617fdad2cdf75211d6e029f0e8f9ed50539380fefb7a6fb3045b85cd8a6a9d6e0fc3482d0dffdfbcff88b36d0d3c60f165f20d0087a58ba34fc5211ec05e8

  • SSDEEP

    6144:K3xFQXwb+GtmvcRdlLKmRMnQ7GKkO0XgMWuQG/2CIYp1Hp:K3jb+GRdencGK0R5Ie1J

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\241178a992fa09f9494cdfd9afe7494e_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\241178a992fa09f9494cdfd9afe7494e_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2380

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\AD787F6E\_Setup.dll
          Filesize

          128KB

          MD5

          dfc2848fe57982dce76d1631f32df4eb

          SHA1

          bcf875356d3c0801fa344999300f0e63e19368d2

          SHA256

          f7d6de806111208fdfbda305a0aa6c356618d072868aef7089a8f2b106495ed6

          SHA512

          78be702857660f9828d27fe387d2afdb3530996c1541c28451c14a839405ff715d7810e3a24d6307166079dc2009a6dceadc44bead24fe478acb576712287c65

          Download Submit

        • \Users\Admin\AppData\Local\Temp\AD787F6E\_Setupx.dll
          Filesize

          24KB

          MD5

          310c79744ada5c5e5ca4afa5c884c505

          SHA1

          bc9ce858290b9a8c53905473e352d2ada279d4e2

          SHA256

          4777f060dbb455c1923c4b93c9d646e670f9bc717d348230b0ddcf6bc440802a

          SHA512

          7eb860829c02614c6e9c031049bf0c0312433042a4b5476a23bd2cdbd4d810690e25bc2305672d644caf8450f699eebc6109c4ebbaf0cd78b83183bc8fd600f7

          Download Submit

        • \Users\Admin\AppData\Local\Temp\Tsu-094C.dll
          Filesize

          249KB

          MD5

          c147e4237b78ecd1804e8ed89aec3c5c

          SHA1

          74f7a58bc08794ec138205b18640ef487cea2d5d

          SHA256

          e0798d55f6f58944c03c739416b80794fc7b896a58f360d56ce40c84634c8511

          SHA512

          02f8730a8169f6029e80e5d79c1656e3d73838cde16ee137d7b764f5c725e8888f4ea81023c97e036b4fc262c679efe1fef66290e9028b631ca5b73efa4561a0

          Download Submit