6c865884f3e1d21ccf53ad04de8f9a7f664fba39dff43e584c5565f87424da2c

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
14/07/2024, 10:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4575c940c689ed3d003d556167fbf643_JaffaCakes118.exe
Size

96KB
MD5

4575c940c689ed3d003d556167fbf643
SHA1

f3b6ff0d1bc7c1c3eda83fcc91dc850c0838ce29
SHA256

6c865884f3e1d21ccf53ad04de8f9a7f664fba39dff43e584c5565f87424da2c
SHA512

904a10c8fd55327a5698d5045dbb73d5dcf896d4ecc6a038b8104223cb7a7ecc3e3e8d44564a3d190128a200ded2e0b688c956526a74d7c9e1c3a8dfdebb52ea
SSDEEP

1536:xsR40yeTSfHph4HNPbpIw9C8x6ONKtQs+e5Ucz4Wv704oE4MP:xsRKeTSVw9BvnsbsWT04o8

Score

5^/10

Malware Config

Signatures

Drops file in System32 directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\s.exe	4575c940c689ed3d003d556167fbf643_JaffaCakes118.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
332	4575c940c689ed3d003d556167fbf643_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\4575c940c689ed3d003d556167fbf643_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\4575c940c689ed3d003d556167fbf643_JaffaCakes118.exe"
1⤵
- Drops file in System32 directory
- Suspicious use of SetWindowsHookEx
PID:332

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\hmkb5x\tmp.exe

Filesize
56KB

MD5
9a1ed5d8b95d9461871eaa3643b4884f

SHA1
92c2adc69e06abd453c6bdaeedc83f1f32983331

SHA256
762756a0c6e483326dfce5aa89ca90d6e75d3bfead77a2599ac3e34e76aae982

SHA512
e2ab89d01f8d65abe2ae2636ef6dcc301f6d3589db79ef71ed1633fcfb2c6298df419f7d1f0bd205e255ba12b9e9d0ea3b778e26eb61953799721dd10996b411

Download Submit