Analysis
-
max time kernel
140s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
19-07-2024 15:27
General
-
Target
5c882cbfa7b2e25a01f0f1a72d1b7fb3_JaffaCakes118.exe
-
Size
23KB
-
MD5
5c882cbfa7b2e25a01f0f1a72d1b7fb3
-
SHA1
309631f7d9a10365bd99fb773df37a4153ed4e0c
-
SHA256
7c37fca71140bc9b602c844ee24045620df482fbe01aa614dcb259e71c739ca2
-
SHA512
ca4d4d8de93209dbd8322963d8bf6b6f4b7e5e206954b197cdbad6c2caabc38cfeea19fc8812dec60e98c36f709eb27fe2edcc6af01ac8c8280198acb9518022
-
SSDEEP
384:9gblgCbq4r3WvjnXBcgXURMQXgKU0vr8ghrO8N+0/bn3RpiCEvwcwN+7gD0+:ebVbqEWLXBcgXuF8mrL+0/bn3TiCfU7c
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
-
UPX packed file 4 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Program Files directory 3 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5c882cbfa7b2e25a01f0f1a72d1b7fb3_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\5c882cbfa7b2e25a01f0f1a72d1b7fb3_JaffaCakes118.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\5c882cbfa7b2e25a01f0f1a72d1b7fb3_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\5c882cbfa7b2e25a01f0f1a72d1b7fb3_JaffaCakes118.exe" C2⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
23KB
MD5f7a63488296776b41066dfc954ef8106
SHA1a884ff004260253fc50b440a26901248c0235a48
SHA2563bd7ef29899e5596c2463d1d0b0db9cadd0628eeca82e627e9927050ccd1bc43
SHA51211a5f96b8fa8cf932d5501be5e4370e0a89ffc55aa745c178db6f2db02753492a767d564ce26a0953de327a3b5d5111402d5ed131aeeac410a9774f946cde317
-
Filesize
29KB
MD551b3f011be23f9dbdcfe8b119f45be8e
SHA1ffbbab3c3e82ffa7d4e7a8604bf8b9a50118e755
SHA256dd3fed2949561e0f3b917e25f917a944e7d9eb6bdb3636ee5196cb86d3312cf3
SHA512d5ea78f531b4b773b6a854a872da32895dbb4d431d030075341ea1f749ac73317b87b3ccd07e16bd58b54421d7a360a1c8c049d7aabf52f80265c482f0b33c8f
-
Filesize
88KB
-
Filesize
52KB
-
Filesize
88KB
-
Filesize
52KB
-
Filesize
52KB
-
Filesize
88KB
-
Filesize
88KB