Analysis
-
max time kernel
147s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
06/07/2024, 17:53
General
-
Target
291472cf356e7c03f2ded1f0b292fac6_JaffaCakes118.exe
-
Size
540KB
-
MD5
291472cf356e7c03f2ded1f0b292fac6
-
SHA1
3064889a66b2b22343e028b21f2f9a5a21bb8788
-
SHA256
f0ae72d8be9c2c7dfdb642f797747d87dd84c4e5ec8b251ab5fab5d6fde2566b
-
SHA512
8819cd2ff264f91606f2185fec256895c67cf4bbb36de2d17991344ff1675c8643d596c5df2a12860121b7bed31d9797c492191e6a401ff77105bdda328ce9d2
-
SSDEEP
12288:LZZ8vDnBWAw7QLvLU9tZduHkhMTXgp1karbv1Sj:6Y7QPU97du/TXRC8j
Score
7/10
Malware Config
Signatures
-
Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\291472cf356e7c03f2ded1f0b292fac6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\291472cf356e7c03f2ded1f0b292fac6_JaffaCakes118.exe"1⤵
- Checks BIOS information in registry
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx