Analysis
-
max time kernel
149s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
13-07-2024 02:56
General
-
Target
3feaaf410ad7007e1ad7caaf9df70a48_JaffaCakes118.exe
-
Size
318KB
-
MD5
3feaaf410ad7007e1ad7caaf9df70a48
-
SHA1
5972378f125a56d457dcc47b9b9865a3c1c59556
-
SHA256
1409a6bd3327ab2ae58ceab9f2bdf1797612cda93b4367f62f4826e2f417e365
-
SHA512
eb26bdfb5fb848cbcbb16117d65dd7d1d1ec1e322b907a29eaa0d321f976710c059498743b28d15b829f1f394eab7943bd92c7f50ec6d704150b58559c461b23
-
SSDEEP
6144:IgmWGRfN6uWHrUr2QeJ8cVS7mpteh3Dzah6uvnFJyQdhdgwV:IgmhfN6u4UST9smptI/JuPX79
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of FindShellTrayWindow 4 IoCs
-
Suspicious use of SendNotifyMessage 3 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3feaaf410ad7007e1ad7caaf9df70a48_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3feaaf410ad7007e1ad7caaf9df70a48_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- Drops file in System32 directory
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
312KB
-
Filesize
4KB
-
Filesize
2.6MB
-
Filesize
2.9MB
-
Filesize
2.9MB
-
Filesize
312KB
-
Filesize
4KB
-
Filesize
2.6MB
-
Filesize
2.9MB
-
Filesize
2.9MB