Analysis
-
max time kernel
130s -
max time network
140s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
27-07-2024 11:18
General
-
Target
78038435fb24c6e359cb54eb73587630_JaffaCakes118.exe
-
Size
264KB
-
MD5
78038435fb24c6e359cb54eb73587630
-
SHA1
5afd6c2b14cafcc654ec102b51eeb3bfe5af8350
-
SHA256
8436ce4e167dc0e6fd5c5eb404a35f6e9bca86cd3404508ac0e7079aa5c53ca1
-
SHA512
05b7e4af89439cfb449033597fe2af71372d38a84b9b0dcd878f441fcb8258de72f6a356ff1628160da111fd0886ca80f4a858a871c2d14b9a539ed0f356b36d
-
SSDEEP
6144:qzz1IDCKhYoOrNcOQSO09gzCY/08TKmalp1ZAD8u3nlk:qNIDC6rOrNcOQSB0CWFQsnl
Score
10/10
Malware Config
Signatures
-
Trickbot
Developed in 2016, TrickBot is one of the more recent banking Trojans.
-
Trickbot x86 loader 2 IoCs
Detected Trickbot's x86 loader that unpacks the x86 payload.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\78038435fb24c6e359cb54eb73587630_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\78038435fb24c6e359cb54eb73587630_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
36KB
-
Filesize
36KB