Analysis
-
max time kernel
141s -
max time network
102s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
29-05-2024 04:53
General
-
Target
7f8bdf4b6359b7c6187f4d9bec51105a_JaffaCakes118.exe
-
Size
857KB
-
MD5
7f8bdf4b6359b7c6187f4d9bec51105a
-
SHA1
b7083515bd6841d28dbeca6a0bbb88e5e038aae9
-
SHA256
66de99df303e421dd67c48a74ae6d7e68cdf7689ca97befbfaae1603df12b529
-
SHA512
fc4bbe5753b1b7815da89b70525dd872aa24c5d339d700947ad6f57051a320ea32a13657842603db0e10aa0339200cd795edc108fba65016c3e899f360131b87
-
SSDEEP
12288:ccgAw2af7T86q7TynrJz/8sajA404DQFu/U3buRKlemZ9DnGAet2z8fvvuG1ItHr:cp+afsPnM9/uA41ImPOhyqSy+PXS
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of AdjustPrivilegeToken 24 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7f8bdf4b6359b7c6187f4d9bec51105a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\7f8bdf4b6359b7c6187f4d9bec51105a_JaffaCakes118.exe"1⤵
- Checks computer location settings
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
876KB
-
Filesize
4KB