Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
19-07-2024 16:18
General
-
Target
5cb14e5ffc873fda92f61c0fe184d4ee_JaffaCakes118.exe
-
Size
45KB
-
MD5
5cb14e5ffc873fda92f61c0fe184d4ee
-
SHA1
8b6fa392f3f3b4bbb2b290ba68e57cddccdb2a81
-
SHA256
8f82696c70282675669614cf3a5670d2bd919d6a641b67b1dced2f4589036f0a
-
SHA512
090c8a61f5ab20603e69e274c2d6d4ab18b0cd8118791249ad1c1a0b85f9b8134ce6c3aafbb73c69e7c210415ea66fcc1090932b266b69c6adf674d862b42f28
-
SSDEEP
768:bK7916pHyZSIIJtEvpCjwRkV62XPugfd:bKT+HuShjEJ2fnfd
Score
10/10
Malware Config
Extracted
Credentials
Protocol: smtp- Host:
smtp.gmail.com - Port:
587 - Username:
[email protected] - Password:
LOL12345
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5cb14e5ffc873fda92f61c0fe184d4ee_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\5cb14e5ffc873fda92f61c0fe184d4ee_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
72KB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
4KB
-
Filesize
9.9MB
-
Filesize
9.9MB