Analysis
-
max time kernel
150s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
23/07/2024, 10:20
General
-
Target
672d46150e0a5d3b2761f80467508f68_JaffaCakes118.exe
-
Size
1.5MB
-
MD5
672d46150e0a5d3b2761f80467508f68
-
SHA1
5a523e886172f5f471f898ac7ba322f7a77114f1
-
SHA256
eebb0b1754a22d2fba142be8002125548a2c4b81f7c9d49b92b41475b43cbdf8
-
SHA512
99aa8b8242ce49c3611350f440b3f96f9c0e99dd4d8b3cb283b6fc4e996703a50e0d61839f49dde8dbc68065e9de9a980b65d7e02ecde90322a851dd925ebad3
-
SSDEEP
24576:nA8DCzDQ1DVLaIaUd8/ebCINB+Huklsu0Xk+b5tr6QMT75VtKU/SIx2cymoGNhnU:nA8O2L9aUqebCVsu0l5CfUU6Ix2j43I
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Drops file in System32 directory 1 IoCs
-
Drops file in Windows directory 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\672d46150e0a5d3b2761f80467508f68_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\672d46150e0a5d3b2761f80467508f68_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- Drops file in System32 directory
- Drops file in Windows directory
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.2MB
-
Filesize
6.2MB
-
Filesize
6.2MB
-
Filesize
6.2MB
-
Filesize
6.2MB
-
Filesize
6.2MB
-
Filesize
6.2MB