Analysis
-
max time kernel
140s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19/09/2024, 03:16
General
-
Target
ea7bdd8031f0e31aacdd3495fa72861b_JaffaCakes118.exe
-
Size
1.2MB
-
MD5
ea7bdd8031f0e31aacdd3495fa72861b
-
SHA1
90551bd25d0429c2660fbae58c02235c8ab18933
-
SHA256
9b817142e3c7588fd0e08d06a4e79ca40025fb70a871125306f6de01d5c622f2
-
SHA512
a96699584ac5a9b1ec5ea20394d47f2c9771575731a04779125096d70a3d35943c75ba5fe4dd7779bcb406f8d784c7ce126771b97105f9f3cc3031c3cd4f376a
-
SSDEEP
12288:eW6qGSANe0xU9bwgLu3YCd9YIA4HIb4ltaQ6bwP+w7eBJPQNfEtBCF:AP5ybwgLu3xdmRjYoQ6MXAJPQNMtBCF
Score
7/10
Malware Config
Signatures
-
UPX packed file 15 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ea7bdd8031f0e31aacdd3495fa72861b_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ea7bdd8031f0e31aacdd3495fa72861b_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB