Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    04/07/2024, 09:44

General

  • Target

    257dd5e39344e4106ba187e2265c3e79_JaffaCakes118.exe

  • Size

    92KB

  • MD5

    257dd5e39344e4106ba187e2265c3e79

  • SHA1

    887f2928e119036ec9513b035e6a050699b7e7f5

  • SHA256

    21f8145342d003f46d32c3a7bd22e32ae815df5097fec715aeb9bdb4f973b273

  • SHA512

    2ff43edb7f67727e47c197001262468551f50a0780ae0baa22f966ae274a35d1246abeb3d975db4e83c3140d2f44105ec32824e24cfc7e3b15508cc74a911ac6

  • SSDEEP

    1536:SecSiHR/nWX9S3uFrmzbsJubK9HTI6s5+NWMJaQdyIlmwXx90dK92o3iMr+0Lpjh:Secvxv2zdssNWMJaQdyIlmwXx90dK92g

Score
6/10

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\257dd5e39344e4106ba187e2265c3e79_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\257dd5e39344e4106ba187e2265c3e79_JaffaCakes118.exe"
    1⤵
    • Adds Run key to start application
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1688

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads