e12cd135304188762c43af9f20ec62bd39b56294245e73109dfbd4465bced3eb

Analysis

max time kernel
12s
max time network
150s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
15/07/2024, 08:28

Target

48fee6150acb092b4512987d09a26890_JaffaCakes118.exe
Size

44KB
MD5

48fee6150acb092b4512987d09a26890
SHA1

8799af4875d99db47a932845c835124186b0069a
SHA256

e12cd135304188762c43af9f20ec62bd39b56294245e73109dfbd4465bced3eb
SHA512

3d703d01c4fec432222c65181efa9d5275c040fdf58d08680a30442072286cb98bbb94f8a300baf80c69ca41b468255751254843f20d20cc3386b0b7589d07b1
SSDEEP

768:3py19w4pvbGuBm/9gUr9b33HyP+X6zmri/ufqEMY7sXkDIFr3VpZkO2:3pyrxbGuE9gPVT

Score

6^/10

discovery

Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046

Suspicious use of SetWindowsHookEx 3 IoCs

C:\Users\Admin\AppData\Local\Temp\48fee6150acb092b4512987d09a26890_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\48fee6150acb092b4512987d09a26890_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2584

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact