Analysis
-
max time kernel
119s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
29-08-2024 06:25
General
-
Target
c85c5c20916f515897d6afd6478f1e8c_JaffaCakes118.exe
-
Size
712KB
-
MD5
c85c5c20916f515897d6afd6478f1e8c
-
SHA1
faf5b17fb9758a4e2280c18613a998be72bc31a0
-
SHA256
97bf3241410ed3451887ddb7eb5b4c795e2deee54d8d686c1d836e2f1dd898bf
-
SHA512
aa2d0175f3b4f3c6cd44d8e811760590a48b144d4f9ab9923c3cb1c4c0c82afd0cb272c7f5a851087a7739097871d4d4db9853250ccabbb78b30e157505585b2
-
SSDEEP
12288:bOZ2ahqLsyu1vBd/Py4/gAYrIrCzjVGQMODNBlXSD505FWTawvR3VkZAr:bMh7PyigAYrIrCpGQjDhCD54FcR3SZ
Score
7/10
Malware Config
Signatures
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c85c5c20916f515897d6afd6478f1e8c_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\c85c5c20916f515897d6afd6478f1e8c_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
2.3MB