Analysis
-
max time kernel
2s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
09-07-2024 23:59
General
-
Target
3284e59be4faa9336b5b23e07c2ed8db_JaffaCakes118.exe
-
Size
31KB
-
MD5
3284e59be4faa9336b5b23e07c2ed8db
-
SHA1
07a7aecb1fad8d3a5cbb02d5c047a77354445c27
-
SHA256
de0cb2b6b1be2e8e82bf07c23c48ba930558f653efaaba9a86f847600430f6b4
-
SHA512
e2b32232a716f8409988c48640af57db72a019483dbbbf7f9a6bfa735b60839581a26ff7b3315e84bb507d20765275ccc30ce076822026b3886424ecf9bdb363
-
SSDEEP
768:t53z8nI0tRzO8Vg6YIwYw8pH2bBEr1XrRBOV5:gA6N6ErFOj
Score
7/10
Malware Config
Signatures
-
Loads dropped DLL 3 IoCs
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Drops file in System32 directory 1 IoCs
-
Drops file in Windows directory 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 3 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
-
Suspicious use of WriteProcessMemory 6 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\3284e59be4faa9336b5b23e07c2ed8db_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3284e59be4faa9336b5b23e07c2ed8db_JaffaCakes118.exe"2⤵
- Loads dropped DLL
- Adds Run key to start application
- Drops file in System32 directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
24KB
MD57069caf26be622f5a72be6e99a8db29f
SHA1b5d6da2b32204d2a06c80eaad720614f07ca44ec
SHA2566469e8a348e8b14a776fb2b865379b658b6a545485c2f8a8f0e88dab33bab146
SHA51222d0f24dd57a3e00faf6fc3b1b472a8abce256629295735c428c079497826b5085a43562842ca5bb872c64b6568e9ee0ae867b27bc5a51bf18f8690760e81fcd
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
40KB
-
Filesize
4KB
-
Filesize
40KB
-
Filesize
4KB
-
Filesize
40KB