Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/07/2024, 23:08

General

  • Target

    298a4a478c7fbfac25058dc8b49cc27d_JaffaCakes118.exe

  • Size

    646KB

  • MD5

    298a4a478c7fbfac25058dc8b49cc27d

  • SHA1

    3878e1a815e69a2678840cfb83fea47c3b789386

  • SHA256

    386fd9756bc2d8f60102925bbb282b71643422708125b45a686d4cefbf4532b6

  • SHA512

    0ead75d9201260db4438f453e51ac4706cc3ff40d9f10e3cd4b797f17453b65a0f31c4fb497cd46a6fae694c28ab45df12a00663d769710a2427214386c0e580

  • SSDEEP

    12288:PXdh2Tl6shTzy1lbC7JY0IM6ax80s8kx4IEqsDSeUESn0pC6:PXf2h6sJzy1lb8JY0iaS0s8k6zqsDSev

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\298a4a478c7fbfac25058dc8b49cc27d_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\298a4a478c7fbfac25058dc8b49cc27d_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3980

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\offconfig.temp

          Filesize

          593B

          MD5

          5c2cd20c7d43c691e7a7a721484fc21b

          SHA1

          a021e4cde3e22d9c18847d882ae30b9e35837fcf

          SHA256

          e4f531b8cbd10b879c5ced2be26425a59d450fbc03b75c2873312fcb252c4263

          SHA512

          24abcbbbb23496bca44f7c297ae00bf13bacfd11cf9526d15d625ae59d7b6fccce58d6852621e96620dec25f629e3e048a610b9f6adbff8e82418342513bdae7