Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
13-07-2024 01:37
General
-
Target
3faf876f1eea7198eac5edc500519d65_JaffaCakes118.exe
-
Size
137KB
-
MD5
3faf876f1eea7198eac5edc500519d65
-
SHA1
884c1c6cbb7f1f5664ca70ba34de390c0d519771
-
SHA256
99b9f9008eabc8154a3b43176debe3e7e42dfb647fb7c07c0374a1370a2a3fcd
-
SHA512
7815132e9f5050d45fe38e0d2590effc0d6c42e073fb3d009f860329120259cd152ce48910cedb973fa9ab5d5a171e8402a67663a20d8125e578673234c5f5b2
-
SSDEEP
3072:ye8jMCjM/keGyMYaKW6IXrORRJtrlBRl:yftIPaNijHxl
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious use of FindShellTrayWindow 4 IoCs
-
Suspicious use of SendNotifyMessage 4 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3faf876f1eea7198eac5edc500519d65_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3faf876f1eea7198eac5edc500519d65_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
352KB
-
Filesize
4KB