6c865884f3e1d21ccf53ad04de8f9a7f664fba39dff43e584c5565f87424da2c

Analysis

max time kernel
150s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
14-07-2024 10:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4575c940c689ed3d003d556167fbf643_JaffaCakes118.exe
Size

96KB
MD5

4575c940c689ed3d003d556167fbf643
SHA1

f3b6ff0d1bc7c1c3eda83fcc91dc850c0838ce29
SHA256

6c865884f3e1d21ccf53ad04de8f9a7f664fba39dff43e584c5565f87424da2c
SHA512

904a10c8fd55327a5698d5045dbb73d5dcf896d4ecc6a038b8104223cb7a7ecc3e3e8d44564a3d190128a200ded2e0b688c956526a74d7c9e1c3a8dfdebb52ea
SSDEEP

1536:xsR40yeTSfHph4HNPbpIw9C8x6ONKtQs+e5Ucz4Wv704oE4MP:xsRKeTSVw9BvnsbsWT04o8

Score

5^/10

Malware Config

Signatures

Drops file in System32 directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\s.exe	4575c940c689ed3d003d556167fbf643_JaffaCakes118.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2252	4575c940c689ed3d003d556167fbf643_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\4575c940c689ed3d003d556167fbf643_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\4575c940c689ed3d003d556167fbf643_JaffaCakes118.exe"
1⤵
- Drops file in System32 directory
- Suspicious use of SetWindowsHookEx
PID:2252

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\km7\tmp.exe

Filesize
116KB

MD5
81da8206aa603ddab3e0a64cae65f41b

SHA1
1ecd6cb3e927eb55e9f416b9230758c6591798b7

SHA256
fef5287f2a339b4d16ae983ed4b07193d32933ab114b02cd7d3959862f076de3

SHA512
8dc37f8ba8c8828d8368390b66663c62eaa9cb15e6117ce4cb21ddc38a3fe40dcc7165806412536c876c5170b222258d298288384f7ba7c4caa80a916e3a1953

Download Submit