Analysis

  • max time kernel
    141s
  • max time network
    136s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/07/2024, 03:11

General

  • Target
    3bc8cab90aa55863dece69794cdb811c_JaffaCakes118.exe
  • Size 197KB
  • Sample240712-dpslysyejc
  • SHA256 6096db3b7948d874998bb8b219f7868c11904d653dc0c98e6bdbbca8c4fd739f
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3bc8cab90aa55863dece69794cdb811c_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\3bc8cab90aa55863dece69794cdb811c_JaffaCakes118.exe"
    1⤵
    • Adds Run key to start application
    • Suspicious use of SetWindowsHookEx
    PID:1104

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/1104-0-0x0000000000400000-0x000000000047F000-memory.dmp

        memory/1104-1-0x0000000000400000-0x000000000047F000-memory.dmp

        memory/1104-2-0x000000000044E000-0x000000000047E000-memory.dmp

        memory/1104-5-0x0000000000400000-0x000000000047F000-memory.dmp