bb701cc816dd2b396f8d3dbe2bac41c5b41a47b6e914b6c69749e8759a087c1a

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
11/07/2024, 17:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

3a0da225c9ec316af8163fa5e9d58555_JaffaCakes118.exe
Size

44KB
MD5

3a0da225c9ec316af8163fa5e9d58555
SHA1

01750a2c40e95fa0c08d7ea6b5abb61bdb4d4014
SHA256

bb701cc816dd2b396f8d3dbe2bac41c5b41a47b6e914b6c69749e8759a087c1a
SHA512

31816d78802c5a679832d106ea518fa85791dda244fe2d4874d95796c80e313678cfc6d07e6a00a7a312ac63d2f90576b6641a120e0a4e323218a81e67ee1287
SSDEEP

768:fe+jNnY6mSa+ux4L7O0ua8Uxd7SLIKduRt3cXauzX2W:feZGQI/lX7SRuMXV

Score

6^/10

evasion trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	3a0da225c9ec316af8163fa5e9d58555_JaffaCakes118.exe

Suspicious use of SetWindowsHookEx 5 IoCs

pid	Process
3936	3a0da225c9ec316af8163fa5e9d58555_JaffaCakes118.exe
3936	3a0da225c9ec316af8163fa5e9d58555_JaffaCakes118.exe
3936	3a0da225c9ec316af8163fa5e9d58555_JaffaCakes118.exe
3936	3a0da225c9ec316af8163fa5e9d58555_JaffaCakes118.exe
3936	3a0da225c9ec316af8163fa5e9d58555_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\3a0da225c9ec316af8163fa5e9d58555_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\3a0da225c9ec316af8163fa5e9d58555_JaffaCakes118.exe"
1⤵
- Checks whether UAC is enabled
- Suspicious use of SetWindowsHookEx
PID:3936

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads