Analysis
-
max time kernel
94s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
19/07/2024, 11:45
General
-
Target
5bce622ca4845862b89764d1a92c5020_JaffaCakes118.exe
-
Size
36KB
-
MD5
5bce622ca4845862b89764d1a92c5020
-
SHA1
6209430fe30869d26e18669b2f26267fc2af3be6
-
SHA256
22cbbf0fae478427ff92f2503d4e8882994d5d636d8d6517a9c164971334c31f
-
SHA512
734dda32f239e8f77708aae80e804e43f9d60489b9a7be5ab98f96cddfcc907ebcf56456be7ed3ca1aded46328f042cee4f8f1b8b072400aa1e1cc4a4733154e
-
SSDEEP
768:P4qVv8RtjkNqIGHlW1KFkbqxEKhtymSz3XRw+1GnJh:1VYtjwqVyz3Xa+AJh
Score
8/10
Malware Config
Signatures
-
Modifies RDP port number used by Windows 1 TTPs
-
Modifies WinLogon 2 TTPs 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5bce622ca4845862b89764d1a92c5020_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\5bce622ca4845862b89764d1a92c5020_JaffaCakes118.exe"1⤵
- Modifies WinLogon
- Suspicious use of SetWindowsHookEx