Analysis
-
max time kernel
32s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
05/07/2024, 13:44
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
26f3289f1e93f4c2dc7a2f1e82a54eb6_JaffaCakes118.exe
Resource
win7-20240704-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
26f3289f1e93f4c2dc7a2f1e82a54eb6_JaffaCakes118.exe
Resource
win10v2004-20240704-en
2 signatures
150 seconds
General
-
Target
26f3289f1e93f4c2dc7a2f1e82a54eb6_JaffaCakes118.exe
-
Size
45KB
-
MD5
26f3289f1e93f4c2dc7a2f1e82a54eb6
-
SHA1
72891f5c466aef57b952ca1c212d84d0a5708ca6
-
SHA256
523604e482aa8d7cfc3125d7ba995e84836d4228bb9b7d472f27721e65ecebbd
-
SHA512
c9710d599ba9249dac9a17ca6c624fd759d2e07ccf80988d703f7eccd813014753a29647a23c83c47f8f6ca34d7985e51b40bf809560ca7f40ae8660a2637451
-
SSDEEP
768:yvBatD/NQRLpjMK7qdfz6vdbyqHghuZ8S32T3I:iBsKJg4byqHgsC
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Windows\CurrentVersion\Run\tashnqr = "C:\\Users\\Admin\\AppData\\Local\\tashnqr.exe" 26f3289f1e93f4c2dc7a2f1e82a54eb6_JaffaCakes118.exe -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\Main 26f3289f1e93f4c2dc7a2f1e82a54eb6_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2748 26f3289f1e93f4c2dc7a2f1e82a54eb6_JaffaCakes118.exe 2748 26f3289f1e93f4c2dc7a2f1e82a54eb6_JaffaCakes118.exe