Analysis
- max time kernel
141s - max time network
124s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
- submitted
14/10/2024, 21:32
General
- Target 44473bb44ecce8e34f861416ae7ea3ff_JaffaCakes118.exe
- Size 32KB
- Sample241014-1dmmwsxemb
- SHA256 c0068ac5fba5adf4e6f5f331104ac59deeee0675724e560d5976f057113bdf9c
Score
6/10
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 1 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\44473bb44ecce8e34f861416ae7ea3ff_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\44473bb44ecce8e34f861416ae7ea3ff_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1304-0-0x00007FFAB1DE5000-0x00007FFAB1DE6000-memory.dmp
memory/1304-2-0x000000001C1F0000-0x000000001C6BE000-memory.dmp
memory/1304-1-0x00007FFAB1B30000-0x00007FFAB24D1000-memory.dmp
memory/1304-3-0x000000001BBF0000-0x000000001BC96000-memory.dmp
memory/1304-4-0x00007FFAB1B30000-0x00007FFAB24D1000-memory.dmp
memory/1304-5-0x000000001C860000-0x000000001C8FC000-memory.dmp
memory/1304-7-0x0000000001390000-0x0000000001398000-memory.dmp
memory/1304-8-0x00007FFAB1B30000-0x00007FFAB24D1000-memory.dmp
memory/1304-9-0x00007FFAB1DE5000-0x00007FFAB1DE6000-memory.dmp
memory/1304-10-0x00007FFAB1B30000-0x00007FFAB24D1000-memory.dmp
memory/1304-11-0x00007FFAB1B30000-0x00007FFAB24D1000-memory.dmp