Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    10/07/2024, 09:50

General

  • Target

    343933afe9198f082c2f706340e3c4f1_JaffaCakes118.exe

  • Size

    152KB

  • MD5

    343933afe9198f082c2f706340e3c4f1

  • SHA1

    02c457d15b7a9782ed7b466487389d2e4874aba1

  • SHA256

    4d2cb2b038f29fc18c95bf0fc851ad08b8ebe0ef6ef647c38cefa33940cbe10c

  • SHA512

    03ab538fe4c9be675bbcbb81543169ea585072a71b841a413c537f82e4cc9c01da532e990149976a0276279e8e9d01fd3a16ae5cc8565bb248e3357e5f2530b0

  • SSDEEP

    3072:arlLUjZDGlltYsbX0GeaA2grqqNOENxqafP:arWtDGTtYBGRABO6oI

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\343933afe9198f082c2f706340e3c4f1_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\343933afe9198f082c2f706340e3c4f1_JaffaCakes118.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of SetWindowsHookEx
    PID:2976

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\gx6tf3\tmp.exe

    Filesize

    84KB

    MD5

    9c1e4b3f098dc24fb9f48d99297c6cd5

    SHA1

    996ae8e9cc3c0845fa13495e7cc2cd504f79b302

    SHA256

    7ac739c3c2da647a7927fb916ea78e412acd9395e60ef24a7bcc5aa8828fd3cb

    SHA512

    60dcd6d1db7c5a7f2e1feb25daf46f16e85d19b20a85715fdceb4176a389147f074e6005d14ff64045813a50527cf24ee39ea8031a1a43f8eb6e24df1a6bca19