Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
19-07-2024 12:24
General
-
Target
5beff0e8f361da06fd8b345d48983ddd_JaffaCakes118.exe
-
Size
137KB
-
MD5
5beff0e8f361da06fd8b345d48983ddd
-
SHA1
b2b160b0f90feec55aeace696f51c4836a8923e0
-
SHA256
486ab21343f7095327fb3d8c959e2a99f3195bfe38ef85dfae4cf7c8bbba268d
-
SHA512
796f44d78cf35ec304c97cf8c0a0bb2de94092385a617690b7be7572332d184be11c431657fbaf34d838937aa3b5415ee12730b70c4d7257f77c7edc9c83d823
-
SSDEEP
1536:u/nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HklJNprKR9lpJtHL53Wi:Ye8jMCjM/keGyMYaKW6WXrORRJtrlq
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious use of FindShellTrayWindow 4 IoCs
-
Suspicious use of SendNotifyMessage 4 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5beff0e8f361da06fd8b345d48983ddd_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\5beff0e8f361da06fd8b345d48983ddd_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
352KB
-
Filesize
4KB