Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
15-07-2024 08:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
48f7b2132747ba1a61afca64b63697bb_JaffaCakes118.exe
Resource
win7-20240708-en
windows7-x64
3 signatures
150 seconds
General
-
Target
48f7b2132747ba1a61afca64b63697bb_JaffaCakes118.exe
-
Size
24KB
-
MD5
48f7b2132747ba1a61afca64b63697bb
-
SHA1
8ed2b6e8bc91305c05d010cd57852c6d294c24fb
-
SHA256
067db823bde372c4d0b361f5296b5c8e9496a37a838e625fa5998ddd82e5093a
-
SHA512
e90c03c8e104751a80f4f3b65b2657e676c83426e1a7940460ec906f41d132a28404d5793291c8ffa74457b48fdb16abfffb37ab1dbce429e0eb8bb524ffe0c4
-
SSDEEP
384:tf1jCPkY3upyvcewbzSgtjeBBHtbLJEH:7jseZpS8ItbLJE
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2388 48f7b2132747ba1a61afca64b63697bb_JaffaCakes118.exe