Analysis
-
max time kernel
140s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
27-07-2024 02:42
General
-
Target
76c2cfc7035c5e07c4f85230d9f459fc_JaffaCakes118.exe
-
Size
53KB
-
MD5
76c2cfc7035c5e07c4f85230d9f459fc
-
SHA1
8042f4893a0ad65684d887635a000b91904c7545
-
SHA256
82d64a97a9c16bce8cfc09d1599cd36ea69d90b4c99b1c649d5d00f6f59a8bd9
-
SHA512
5eeb3ee93d7d318cab4fc60a5a8c761a1c7b0a4c07621e3942faf8314f22c623b4ada6c11c2f2f1bb132534864f26bae7732ba86de51fa057b68acc51c3a6c81
-
SSDEEP
1536:6TeG8VzKlMwcgNtzF5rQRw5eOnGKXm0EciSmJ:/SMwntWwdGY9EcZS
Score
7/10
Malware Config
Signatures
-
UPX packed file 15 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Drops file in Program Files directory 3 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\76c2cfc7035c5e07c4f85230d9f459fc_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\76c2cfc7035c5e07c4f85230d9f459fc_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
108KB