Analysis

  • max time kernel
    141s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    02-10-2024 01:23

General

  • Target

    083d1ba08caccec2d2b8b87a3e5c2b4d_JaffaCakes118.exe

  • Size

    69KB

  • MD5

    083d1ba08caccec2d2b8b87a3e5c2b4d

  • SHA1

    c5082f02e5f3ecf8d1a36a679a4da23319e68b5b

  • SHA256

    e471dd53ffaca9329d2dde5aa800855ba3bd235a5deb33baacc0bc7437d4ca50

  • SHA512

    83ded2c16b92eb800fbd7cc86122493fbfd7d934695f0d4c12bd1acbb04b98d54b4b3d7d3442691542c598ff0ed826a98095a3b0828635dcba712b43c82f1fcc

  • SSDEEP

    1536:7fqqYaQcLy1TobUnVXABpQaMqtIRQH0nXNosPuYgDhwSW/c:OapLlbcZwyauu0nesYDhrkc

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Drops file in Program Files directory 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\083d1ba08caccec2d2b8b87a3e5c2b4d_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\083d1ba08caccec2d2b8b87a3e5c2b4d_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2512

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Program Files\Internet Explorer\InfoMs.tdm

    Filesize

    46KB

    MD5

    29eaf7901ebb4cd824f25c87f4eda51c

    SHA1

    61720fefe6a63d506688a1c889c2aa88938dd546

    SHA256

    ed071ba52887ee780dbff592ee255010ac8c6f1adf20a1147107308b421162bd

    SHA512

    be1f69007cb64fb6a0d98eaa6e9578a1eca2b083190c2dabf5075283be7774b3de5d285892673ea36d6c57636c230e0455741be069862f04cc172727fff53f93

  • memory/2512-4-0x00000000003B0000-0x00000000003C1000-memory.dmp

    Filesize

    68KB

  • memory/2512-6-0x0000000000400000-0x0000000000418000-memory.dmp

    Filesize

    96KB

  • memory/2512-7-0x00000000003B0000-0x00000000003C1000-memory.dmp

    Filesize

    68KB