Analysis
-
max time kernel
134s -
max time network
106s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
24/07/2024, 08:38
General
-
Target
6af2a2799f228dfc33547e96e5da411a_JaffaCakes118.exe
-
Size
4.6MB
-
MD5
6af2a2799f228dfc33547e96e5da411a
-
SHA1
0cf9758f0569d01ed8f3ab5456cfaf3a6bc145cb
-
SHA256
3c63f5fa9f30bc861dcb870a1e25b608a8f32f480187cb217095b218408eaecd
-
SHA512
8046b9bfc042fa7d0bfcbfb749f3c5cf9207f0626293889cfdc7899db86bf5781ea89f7983bdadeb6539a2d9f74613fd5238dedf70e1d809b2f7fafb747a4eb3
-
SSDEEP
98304:s3W3i1wn+LdH5eBzinhxwKBFRBu4ZeRDRLJMMT:MHMBzyDBuW4RLl
Score
7/10
Malware Config
Signatures
-
UPX packed file 24 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6af2a2799f228dfc33547e96e5da411a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\6af2a2799f228dfc33547e96e5da411a_JaffaCakes118.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
4KB