Analysis
-
max time kernel
141s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
01/10/2024, 03:06
General
-
Target
0424fd18628556354e219ac9b29e56cf_JaffaCakes118.exe
-
Size
202KB
-
MD5
0424fd18628556354e219ac9b29e56cf
-
SHA1
94cf88975ffdfa2c978402f1c7e06c42fa1f15d4
-
SHA256
f51fa3bd36a661c5d78cc857a2ee205f2828868edd7d0cd32fe6aa76e26933c4
-
SHA512
3487d0c6ddc3e3ec55c81d1a7e3e1dbc149eccb534e3c480567af947da6cf733483da2ee7b2e11021de13eb9f10977cb06eb952688101c75c49c649a00bce837
-
SSDEEP
6144:OZC4d3lbxc6wU/UP+XhdMRFD3LAwektHoSAd:34dMRU/UP4heFjLDFtHoS0
Score
5/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 3 IoCs
-
Suspicious use of SendNotifyMessage 3 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0424fd18628556354e219ac9b29e56cf_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0424fd18628556354e219ac9b29e56cf_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
464KB
-
Filesize
464KB