Analysis

  • max time kernel
    142s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    13-07-2024 14:55

General

  • Target

    422827f227162ec63e515172bc874b4f_JaffaCakes118.exe

  • Size

    624KB

  • MD5

    422827f227162ec63e515172bc874b4f

  • SHA1

    0593e527e7a98a4197ebd3e9355561242cf2d29e

  • SHA256

    ef10021f13f251fd105b4e2bf03c2fed62f32a980dcdfc768b89a1ea0e7b692e

  • SHA512

    c2ee12e37384af5db2d578bd62f0c02e5c80736db6fb474bb26de37fa2ae7ee9cd2c271c04a87d2ddf4b53759a9176fdc82e74d59e2ef8112393a84fbbca9afc

  • SSDEEP

    12288:Pnl59wFrMA6dG+m7JYDClJb5Np1XT0ceu5bQb8zvMp8t:PnNwFrMA6dG+IJYDubDXT0cHb68zTt

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\422827f227162ec63e515172bc874b4f_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\422827f227162ec63e515172bc874b4f_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\offconfig.temp

    Filesize

    41KB

    MD5

    67b71d909bc431d37bf14df0bc954d4b

    SHA1

    866573dddb3a69970b5dbb6fae4ffc8b51cfcd77

    SHA256

    020ac03cd0001e1d1b566f5838b0f9d94845df6c115eda9f71bd6fd11aecd2b9

    SHA512

    275587db1cc44553e7ef479f67fed3e868d0ceac6f1a12f095863b7f2cafb01a4d93a5ccd8a2224deb48bf1a51c3beffd8235f6b1f249476fd5248fbd8461f12