Analysis
-
max time kernel
140s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
25/07/2024, 09:26
General
-
Target
6f0298d8ffc54240255064292db64cf1_JaffaCakes118.exe
-
Size
375KB
-
MD5
6f0298d8ffc54240255064292db64cf1
-
SHA1
34a36ba2595fa285b53c2e9f7055a8e53498d487
-
SHA256
d82c6520d544e25dc7cc4cd6808ed776908e3153eab265ec1a316ea037008688
-
SHA512
4666709a8dd18eda5c3ef1d9303f0269e8fc18474aa70239d5e2e02368b6b0a776c1e6a5fb21c908116c83506bda24d6705911ae4274b7561e7f79ca56fd0bd0
-
SSDEEP
6144:PuNsvZpr0CJqJ9xQPKIgrCgEUCUQs8UoxBjhKqUcTL/N6ux+FPbsumYro8IwBa:PuNsvrT0mgCUCUQs8Vxh5rLpqPbvVk86
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6f0298d8ffc54240255064292db64cf1_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\6f0298d8ffc54240255064292db64cf1_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
144KB
-
Filesize
144KB
-
Filesize
144KB
-
Filesize
144KB
-
Filesize
144KB
-
Filesize
144KB