Analysis
-
max time kernel
140s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
11-07-2024 20:31
General
-
Target
3a9d5080205c31c8e8ddf2a487ff33fb_JaffaCakes118.exe
-
Size
1.4MB
-
MD5
3a9d5080205c31c8e8ddf2a487ff33fb
-
SHA1
0e0cd455c9273cbeffe726d69af8f44e1503360f
-
SHA256
27a341453099a2d23c31e37f3a1a2db2324950d9a0f0810c1fcf59d4f59736d7
-
SHA512
91fd0bfcd0fbbc58da2da7a72885c96f18e773ce5466212992e78180c6ff7493cd108340242babb22bca2f236338e37d97d69fb18756d24111f2ca21a9894eb2
-
SSDEEP
24576:seZvZAXJPv8u+Vu510JlooHFDlj0/Fn7NyuTMQQ32PiGZG1r+6pZ3c:seJWXJH8u+Vu5+PDljsZy9JZcoHp
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious use of NtSetInformationThreadHideFromDebugger 14 IoCs
-
Drops file in Windows directory 2 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3a9d5080205c31c8e8ddf2a487ff33fb_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3a9d5080205c31c8e8ddf2a487ff33fb_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Drops file in Windows directory
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7.0MB
-
Filesize
632KB
-
Filesize
7.0MB
-
Filesize
7.0MB
-
Filesize
7.0MB
-
Filesize
7.0MB
-
Filesize
7.0MB
-
Filesize
7.0MB
-
Filesize
7.0MB
-
Filesize
7.0MB
-
Filesize
7.0MB
-
Filesize
7.0MB
-
Filesize
7.0MB