Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
15-07-2024 05:44
General
-
Target
487758d50053c9b013ed821be81aea5e_JaffaCakes118.exe
-
Size
2.7MB
-
MD5
487758d50053c9b013ed821be81aea5e
-
SHA1
c6b4f10c86901c0603cdaee7d14888badf30c39a
-
SHA256
f598c4108b79688ca5e8c36b3a020c9f932b267771a02c98da8fb7d06ff86567
-
SHA512
7d2fe34ad492ae52665948a022fa057ad697faad178224e3a3c8c9f7ed37c9da1d1ba44e70d7e74844246c59d8adfc39edfa9cddeafea8b3d6dd843b24df6b23
-
SSDEEP
49152:4EsRrFplZ8/Tr4TduR8gNFI1qoouXH6I6+JWySF92ci35DvS5OAl+P5A9H77NeW2:PwvlSvQgTI1FjDSWci3tWYCfn2
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\487758d50053c9b013ed821be81aea5e_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\487758d50053c9b013ed821be81aea5e_JaffaCakes118.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.8MB
-
Filesize
4KB
-
Filesize
5.8MB
-
Filesize
5.8MB
-
Filesize
5.8MB
-
Filesize
4KB
-
Filesize
5.8MB
-
Filesize
4KB
-
Filesize
4KB