Analysis
-
max time kernel
148s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
09-07-2024 19:23
General
-
Target
31a8756b48576862e6312bdc063fa94b_JaffaCakes118.exe
-
Size
378KB
-
MD5
31a8756b48576862e6312bdc063fa94b
-
SHA1
b463b6d251a26a86a1f1472d6dbc0d953f4b4d5c
-
SHA256
9fd8ae4b3bf5dcc239a3ea97e113683d1eb3ce564987109ccbeb2b2565c47d15
-
SHA512
f436e13c9b6886b5ea5367d906d10f3f6ad596b969f205f7ceab5bcc9a1f6044e5a08a2c74ab6e09071c86f8c8fc9fcb661920e34f0208fae663ad44f9a813d6
-
SSDEEP
6144:HMrDwd7lMQ5BCljd6S9Kt0CvvpoUqXxxRuoC2JrgWCSaLRXYh/qiJlzZPWzLoKHf:HqEd7lMY43Kt0CXSUSXagEs/RxWAkf/
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
UPX packed file 5 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\31a8756b48576862e6312bdc063fa94b_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\31a8756b48576862e6312bdc063fa94b_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
944KB
-
Filesize
944KB
-
Filesize
944KB
-
Filesize
944KB
-
Filesize
944KB