Analysis

  • max time kernel
    150s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    16/07/2024, 04:48

General

  • Target

    4cdc5f5c7c5f65ed940f0bac1e1bd22d_JaffaCakes118.exe

  • Size

    154KB

  • MD5

    4cdc5f5c7c5f65ed940f0bac1e1bd22d

  • SHA1

    9d88cd5d88ced257dc45865295f6660ec8ed94ba

  • SHA256

    94f238444ae7227138ec45a9ab61da140e3b470af7e92332bc126a5a5394a1fe

  • SHA512

    d6d07c116477f91c8b39367ad0fcf56b629fcd9b4c4dba253f536e9e94a9b18a9f8a77dcafd565b2a448d386d09e9bcbe32067961a1242a2dd92c447aa3e57b6

  • SSDEEP

    3072:dsFAGnVHIK4e1JL3yYryKXpOri0okZa0eD7EOROPSlL+9:dNWVHIKf1RCYrPpOri0oeeOaly

Score
6/10

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Drops file in Windows directory 2 IoCs
  • Modifies Internet Explorer settings 1 TTPs 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4cdc5f5c7c5f65ed940f0bac1e1bd22d_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\4cdc5f5c7c5f65ed940f0bac1e1bd22d_JaffaCakes118.exe"
    1⤵
    • Adds Run key to start application
    • Drops file in Windows directory
    • Modifies Internet Explorer settings
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2360

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2360-1-0x0000000000400000-0x000000000043C000-memory.dmp

          Filesize

          240KB

        • memory/2360-0-0x0000000000402000-0x0000000000403000-memory.dmp

          Filesize

          4KB

        • memory/2360-2-0x0000000000400000-0x000000000043C000-memory.dmp

          Filesize

          240KB

        • memory/2360-38498-0x0000000000400000-0x000000000043C000-memory.dmp

          Filesize

          240KB

        • memory/2360-41914-0x0000000000400000-0x000000000043C000-memory.dmp

          Filesize

          240KB

        • memory/2360-41915-0x0000000000400000-0x000000000043C000-memory.dmp

          Filesize

          240KB

        • memory/2360-41919-0x0000000000400000-0x000000000043C000-memory.dmp

          Filesize

          240KB

        • memory/2360-41918-0x0000000000400000-0x000000000043C000-memory.dmp

          Filesize

          240KB

        • memory/2360-41920-0x0000000000400000-0x000000000043C000-memory.dmp

          Filesize

          240KB

        • memory/2360-41921-0x0000000000400000-0x000000000043C000-memory.dmp

          Filesize

          240KB

        • memory/2360-41922-0x0000000000400000-0x000000000043C000-memory.dmp

          Filesize

          240KB

        • memory/2360-41923-0x0000000000400000-0x000000000043C000-memory.dmp

          Filesize

          240KB