Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/07/2024, 08:50

General

  • Target

    27f4206aa7be244d1c478b1b24998d48_JaffaCakes118.exe

  • Size

    52KB

  • MD5

    27f4206aa7be244d1c478b1b24998d48

  • SHA1

    7f3ca10579fa63c283b8dc6661497686481bff2d

  • SHA256

    226f5cd8bc80ef02f26001a6ca51a37114b524e7827f474f2003aee09a8c9b70

  • SHA512

    46862425de60b6d6870c31b36160226cb5d68480f8bdd4eda96c350e605075bb29b34b7ec01e04b228aeb1da8f9b2cedfdcfc9e087a7a1302f24b19a1ff4fedf

  • SSDEEP

    768:OqObMzwzz083Jzq4fZ4RB+Hgxcmg90JA4s4WqFECMD8T6KMaZqB53yvKy:+DZq4h4RBfWqeCMD8T6KMpB53yvKy

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\27f4206aa7be244d1c478b1b24998d48_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\27f4206aa7be244d1c478b1b24998d48_JaffaCakes118.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1172

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1172-0-0x0000000000400000-0x000000000040E000-memory.dmp

          Filesize

          56KB

        • memory/1172-2-0x0000000002030000-0x0000000002040000-memory.dmp

          Filesize

          64KB

        • memory/1172-1-0x0000000000430000-0x0000000000440000-memory.dmp

          Filesize

          64KB

        • memory/1172-3-0x0000000002040000-0x0000000002050000-memory.dmp

          Filesize

          64KB

        • memory/1172-4-0x0000000002050000-0x0000000002060000-memory.dmp

          Filesize

          64KB

        • memory/1172-7-0x00000000021A0000-0x00000000021B0000-memory.dmp

          Filesize

          64KB

        • memory/1172-6-0x0000000002180000-0x0000000002190000-memory.dmp

          Filesize

          64KB

        • memory/1172-5-0x0000000002060000-0x0000000002070000-memory.dmp

          Filesize

          64KB

        • memory/1172-17-0x0000000002990000-0x00000000029A0000-memory.dmp

          Filesize

          64KB

        • memory/1172-18-0x00000000029A0000-0x00000000029B0000-memory.dmp

          Filesize

          64KB

        • memory/1172-21-0x00000000029D0000-0x00000000029E0000-memory.dmp

          Filesize

          64KB

        • memory/1172-23-0x00000000029F0000-0x0000000002A00000-memory.dmp

          Filesize

          64KB

        • memory/1172-20-0x00000000029C0000-0x00000000029D0000-memory.dmp

          Filesize

          64KB

        • memory/1172-19-0x00000000029B0000-0x00000000029C0000-memory.dmp

          Filesize

          64KB

        • memory/1172-16-0x0000000002980000-0x0000000002990000-memory.dmp

          Filesize

          64KB

        • memory/1172-25-0x0000000002A10000-0x0000000002A20000-memory.dmp

          Filesize

          64KB

        • memory/1172-15-0x0000000002970000-0x0000000002980000-memory.dmp

          Filesize

          64KB

        • memory/1172-14-0x0000000002960000-0x0000000002970000-memory.dmp

          Filesize

          64KB

        • memory/1172-13-0x0000000002950000-0x0000000002960000-memory.dmp

          Filesize

          64KB

        • memory/1172-12-0x0000000002940000-0x0000000002950000-memory.dmp

          Filesize

          64KB

        • memory/1172-11-0x0000000002930000-0x0000000002940000-memory.dmp

          Filesize

          64KB

        • memory/1172-22-0x00000000029E0000-0x00000000029F0000-memory.dmp

          Filesize

          64KB

        • memory/1172-10-0x00000000021D0000-0x00000000021E0000-memory.dmp

          Filesize

          64KB

        • memory/1172-9-0x00000000021C0000-0x00000000021D0000-memory.dmp

          Filesize

          64KB

        • memory/1172-8-0x00000000021B0000-0x00000000021C0000-memory.dmp

          Filesize

          64KB

        • memory/1172-28-0x0000000002A40000-0x0000000002A50000-memory.dmp

          Filesize

          64KB

        • memory/1172-27-0x0000000002A30000-0x0000000002A40000-memory.dmp

          Filesize

          64KB

        • memory/1172-29-0x0000000002A50000-0x0000000002A60000-memory.dmp

          Filesize

          64KB

        • memory/1172-30-0x0000000002A60000-0x0000000002A70000-memory.dmp

          Filesize

          64KB

        • memory/1172-26-0x0000000002A20000-0x0000000002A30000-memory.dmp

          Filesize

          64KB

        • memory/1172-24-0x0000000002A00000-0x0000000002A10000-memory.dmp

          Filesize

          64KB

        • memory/1172-32-0x0000000002A70000-0x0000000002A80000-memory.dmp

          Filesize

          64KB

        • memory/1172-33-0x0000000000400000-0x000000000040E000-memory.dmp

          Filesize

          56KB