Analysis
-
max time kernel
92s -
max time network
132s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
23/07/2024, 09:18
Static task
static1
Behavioral task
behavioral1
Sample
66fb62682363555e81402cd836f3ed3d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
66fb62682363555e81402cd836f3ed3d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
66fb62682363555e81402cd836f3ed3d_JaffaCakes118.exe
-
Size
664KB
-
MD5
66fb62682363555e81402cd836f3ed3d
-
SHA1
143ddef60cff7c75967713e13542a5808ed84182
-
SHA256
a12b7d8e005585923fb36c17e25e0cce19492a61dec36f040ba9252c6b34418d
-
SHA512
b2c114442c80f8169d0c34e827af70a515e428fbd6e03e64c068152813888154a9b0e24622aa6f1a85dad0c3c0cca75b8db699d5b80b70875857abdc013424ed
-
SSDEEP
12288:HZlDohwte5qkbt4KA/1kVLdh9LEW4UWDVfMUMqnixQFkRpJm+:HkhwtubtfGOVBh9d4bEUMqba/m+
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 964 stvplay.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1688 66fb62682363555e81402cd836f3ed3d_JaffaCakes118.exe 1688 66fb62682363555e81402cd836f3ed3d_JaffaCakes118.exe 964 stvplay.exe 964 stvplay.exe -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1688 wrote to memory of 964 1688 66fb62682363555e81402cd836f3ed3d_JaffaCakes118.exe 86 PID 1688 wrote to memory of 964 1688 66fb62682363555e81402cd836f3ed3d_JaffaCakes118.exe 86 PID 1688 wrote to memory of 964 1688 66fb62682363555e81402cd836f3ed3d_JaffaCakes118.exe 86
Processes
-
C:\Users\Admin\AppData\Local\Temp\66fb62682363555e81402cd836f3ed3d_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\66fb62682363555e81402cd836f3ed3d_JaffaCakes118.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1688 -
C:\Users\Admin\AppData\Local\Temp\stvplay.exeC:\Users\Admin\AppData\Local\Temp\stvplay.exe2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
PID:964
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
448KB
MD53cb7bb9bdd393fff18810d7ff93bcc66
SHA1bb69a31a5d6f0b4b176f88cbc42cc435e837cdef
SHA256707e846eec90bba7b9ff0532c79645f229aa927953b4fca6c4f460106599f9c9
SHA512be63c22fdbb91cdb26b7f9664f9d811204182d1cb70c9334eb4ea64c83aecb796290d4e09316e37f5ef4c93a47fcd3805248deb335e4adf1208a62fc76a3ed56