Overview

overview

3

Static

static

3

f66d602223...18.exe

windows7-x64

3

f66d602223...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    141s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    25/09/2024, 16:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    f66d602223d4890829fc6378a05dc6e1_JaffaCakes118.exe

  • Size

    620KB

  • MD5

    f66d602223d4890829fc6378a05dc6e1

  • SHA1

    9999c0b4769ebcf41cc7fbc1c2079039436a5afe

  • SHA256

    372369b79b9794b38982ff451100276e201aefec954407e9f59b63888b821dc1

  • SHA512

    7b49c83ec0262ea428897f5cd9490bf13aaa52250e6498c65ca03b6bb18eba9c1246c77ba972938fca72ea38dc8042e314d45cfc7e54f6d0f643f96737949f27

  • SSDEEP

    12288:Wnl59wFrMA6dG+m7JYDClJb5Np1XT0ceu5bQb8zvMp4Y:WnNwFrMA6dG+IJYDubDXT0cHb68zPY

Score
3/10
discovery

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f66d602223d4890829fc6378a05dc6e1_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\f66d602223d4890829fc6378a05dc6e1_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2356

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\offconfig.temp
    Filesize

    41KB

    MD5

    a8699ccca60217f19f1f2fe670c4f435

    SHA1

    4ecf76068cbcc7fdb8fdf1783774eaf4d1e48b57

    SHA256

    05ca76020cd59602a588b925c6df2bb5086d7df8e02f7e7d40b40b601ea55b53

    SHA512

    7bcc92802a8ffcded10b5057d263498cc1a5bcb63a89d4e1ba81bd36201678338441e6a5fcf3cc5544507af8b87665290468fd2eb92fdf2bdbacbd496d59309c

    Download Submit