Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
16-07-2024 06:44
General
-
Target
4d36199a6382a6c22cc22d36204e2abd_JaffaCakes118.exe
-
Size
87KB
-
MD5
4d36199a6382a6c22cc22d36204e2abd
-
SHA1
3190f082da90b155faa8971f0d6218cad24cb341
-
SHA256
031637225ac72b03e427b6fb11df29e01bfee657b09f46b1284431ddd430ad82
-
SHA512
e2644900c715f6512477e88b9684a152a5008a96a249438926a74c8cc38fe1d9957fbf332af0c828ed34b9fc4a3475d9978a65db8e3a5162f575e44429755546
-
SSDEEP
1536:onIPtjt1m7ajxuUzlHyacB0k3rSC39DHZPZCawg0ZHXN7+Wh5GOD3ARVM4qe+LVR:oIRTxTpdqrSCBHxcesHXN77D3cV1q48
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Windows directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4d36199a6382a6c22cc22d36204e2abd_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\4d36199a6382a6c22cc22d36204e2abd_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\sxe977F.tmp"C:\Users\Admin\AppData\Local\Temp\sxe977F.tmp"2⤵
- Executes dropped EXE
- Drops file in Windows directory
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
15KB
MD5bd815b61f9948f93aface4033fbb4423
SHA1b5391484009b39053fc8b1bba63d444969bafcfa
SHA256b018bf9e9f8b6d945e6a2a25984970634884afabc580af2b4e855730520d5d76
SHA512a363abe97b5a44e5d36af859e8d484daffe1d8e321c87969a75d1bfaa4288a5e6be1922a02c6d72937c84e81a79a1c7f6c9f2a44a995cac3f993ed5608afcd71
-
Filesize
184KB
MD5204e91165cc0731d2fff87ba5106a53b
SHA1714e86a1395564b1e8077cf232a646265e3098e2
SHA2560853a279100e05a1230422e9730bb43983426c922dcb35a71cf31ea0048b9f52
SHA5129c41cd5638e67d425b47a6d59e2551105f3bb05c6a57a26e0f80359680b73b63673fbc7ac13f23b6c235df462e78066baf50ce1d7a962ac41848174b950e6848