Analysis
-
max time kernel
142s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
11/08/2024, 19:08
General
-
Target
8b9eaf7a43033ddcada3788878d60665_JaffaCakes118.docm
-
Size
382KB
-
MD5
8b9eaf7a43033ddcada3788878d60665
-
SHA1
29387bd86769349d09e65ab685a17eb8759b1bc2
-
SHA256
dfce1d462c53941da0f1d933698bb705c792f9f878f0a6820397e3f7209ea0b5
-
SHA512
b74351062e01f8f50dc7407797149e8b19a0e8228ce7ea645280461d673b6f98d87cb6ebc24320c481143a36e8dc7789dab165f01735357917784e8d7f35bd97
-
SSDEEP
6144:4/2GQYO2wfyqUBDD5LpUuTSVbkecVQYP3yil1s8HsDsXAYeTkpoCz7Jcp:4+RaqUBDDppUugqiYKaBYs1pok7ip
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
NTFS ADS 1 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 7 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\8b9eaf7a43033ddcada3788878d60665_JaffaCakes118.docm" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- NTFS ADS
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
39KB
MD5c2485d9ae8e561a192571bc6a1285725
SHA15547d74bc1ef2ddc668398f07ca34d6b6ad2393c
SHA2565c3e2dd465a682f147a42238021c54ca029774971f6738d680443af925381166
SHA512be629b38d008fd7abb6285797dcf6164df09a4f3fd43449f8b49e9bcf9c9270f4795f6fc00b43fe074418099d0a1a7b90d576c9b5d628b8191c8bfcf5cebba2c
-
Filesize
245KB
MD5f883b260a8d67082ea895c14bf56dd56
SHA17954565c1f243d46ad3b1e2f1baf3281451fc14b
SHA256ef4835db41a485b56c2ef0ff7094bc2350460573a686182bc45fd6613480e353
SHA512d95924a499f32d9b4d9a7d298502181f9e9048c21dbe0496fa3c3279b263d6f7d594b859111a99b1a53bd248ee69b867d7b1768c42e1e40934e0b990f0ce051e
-
Filesize
2KB
MD531beb9fe608909287ad2f6d1e13726b8
SHA16d3ed9e2d2b48037a5ba607cc1d672168edec1c8
SHA256a3293bf7f8e3d3bf9ad3b1fd2844b24f81079fca8ce30765dda70c5c33fdb237
SHA512e5689afa1e9d92a1994b5ecc20483ca1233c1c75c52a866c4cc75aa9413fd438b83e278be05f64fb19f9e4f2e124ceda95d32df8fefff094b27d389114f047dc
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB