Overview

overview

7

Static

static

3

3642230436...18.exe

windows7-x64

7

3642230436...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    94s
  • max time network
    123s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-07-2024 20:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    364223043615c146b4b3fa1eba9081e9_JaffaCakes118.exe

  • Size

    649KB

  • MD5

    364223043615c146b4b3fa1eba9081e9

  • SHA1

    a07b7f8f77864d3768474d755b9eecef8710baac

  • SHA256

    da64083b94355d3f8ab9b8e82a0fa89898cb1b4a430102e6c6ca2061fa1b8676

  • SHA512

    fcd012bbf736ca5777209cc4f7e12700c666b50668269de29aa1f53a4a8ff26dda2b6f8daaac6a2e0231180c77e24c68a8df2f8661603eeaf3f836f25d864846

  • SSDEEP

    12288:gh7wryalDIiHXYwlp+ToI4BEErw7Euz6JUv3ebiUpXd1RjLy12+VnJjZl:ghJa6alp+ToI4BEE2USeldLY2Y/l

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Suspicious use of SetWindowsHookEx 36 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\364223043615c146b4b3fa1eba9081e9_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\364223043615c146b4b3fa1eba9081e9_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:3596

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\‹¿G•þ¶½²ì\iext.fnr
    Filesize

    216KB

    MD5

    cba933625bfa502fc4a1d9f34e1e4473

    SHA1

    5319194388c0e53321f99f1541b97af191999a09

    SHA256

    25549c7781b3f1b92e73b0ea721d177207cce914a66f3229a71291f2eb160013

    SHA512

    f5fb4b97c4f68a20e0847e6528740ce659c4501726f3b2dff1ac83e88a3b7198099da03edb0f069cd4af7ed568a2373597b235cd239895addfa5226d3a444142

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\‹¿G•þ¶½²ì\krnln.fnr
    Filesize

    1.1MB

    MD5

    638e737b2293cf7b1f14c0b4fb1f3289

    SHA1

    f8e2223348433b992a8c42c4a7a9fb4b5c1158bc

    SHA256

    baad4798c3ab24dec8f0ac3cde48e2fee2e2dffa60d2b2497cd295cd6319fd5b

    SHA512

    4d714a0980238c49af10376ff26ec9e6415e7057925b32ec1c24780c3671047ac5b5670e46c1c6cf9f160519be8f37e1e57f05c30c6c4bda3b275b143aa0bf12

    Download Submit

  • memory/3596-0-0x0000000000400000-0x000000000040F000-memory.dmp

    Filesize

    60KB

    Download

  • memory/3596-9-0x0000000002420000-0x0000000002464000-memory.dmp

    Filesize

    272KB

    Download

  • memory/3596-13-0x0000000000400000-0x000000000040F000-memory.dmp

    Filesize

    60KB

    Download