Analysis

  • max time kernel
    140s
  • max time network
    125s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/07/2024, 04:19

General

  • Target

    661c33650e240713027788452005f25b_JaffaCakes118.exe

  • Size

    84KB

  • MD5

    661c33650e240713027788452005f25b

  • SHA1

    e6ffd85f51bc30a64d568cdbca7797f9ff5a291f

  • SHA256

    d30b8239a2bac154d98cf17aad680fe3ebb736b5728a659601f151449433f6c7

  • SHA512

    b6c17c53850b5d6460c6bc14870c1c059a4ddbb7b044a3a4d6a56956b7e869b99963ee3139b626ef0f64ee048089fada03cb6a57d7637bced48f2f7b1fab47f0

  • SSDEEP

    768:/Tz7+hC3lH/JmMGvFO7tv3oH6V9T/ZO72mMGv4/Z3l7+hS:/qhC3h/iFUtQa3T/ZUJ4/Z3kh

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 1 IoCs
  • Drops file in Program Files directory 1 IoCs
  • Drops file in Windows directory 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\661c33650e240713027788452005f25b_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\661c33650e240713027788452005f25b_JaffaCakes118.exe"
    1⤵
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Suspicious use of SetWindowsHookEx
    PID:4352

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads