Analysis
-
max time kernel
16s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
18/08/2024, 12:56
General
-
Target
a6be9184d5bdcd7b95a009ad3789548a_JaffaCakes118.exe
-
Size
6.2MB
-
MD5
a6be9184d5bdcd7b95a009ad3789548a
-
SHA1
8aa45b97ed3c794e783e9207f8d19d765df2d814
-
SHA256
d752906a6f068fe520ecf3f0ab36d33c690ed09dab22547a109d7b5ff7059ccf
-
SHA512
fa7dc820e7bab84448e5f7523fab8dee312bca030b68f8bb44ae16efa027650925b86bf826cea7c688a5fdbdbdcb83ab24642bcb42b28aef99cbeb1abaa14c1c
-
SSDEEP
98304:liqLBEouRHgDHkpfEOLuPltp1wn+LdH5eBgaFyaeCCGYTXKNHdY8:lKlgrOnLEHMBgaFyPMd
Score
7/10
Malware Config
Signatures
-
UPX packed file 24 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a6be9184d5bdcd7b95a009ad3789548a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\a6be9184d5bdcd7b95a009ad3789548a_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB