Analysis
-
max time kernel
141s -
max time network
102s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
25-07-2024 23:05
General
-
Target
719e531fca7b3c4fbe4b7cf16e8ded4a_JaffaCakes118.exe
-
Size
371KB
-
MD5
719e531fca7b3c4fbe4b7cf16e8ded4a
-
SHA1
89f4c758edd59951c2991f8aa17065f014485770
-
SHA256
f8a6cf426d27702647da5816b97e05675242108f11538303f0af13974874af75
-
SHA512
f3e4eb4ce1c13e5ecb248a33341ccba6c9dee7fb7244ef7f6beacca4b93c73f56b58391e10a898780fd36d761fcc2df4d96eed35c3531ee511d1ab4887b0bbd2
-
SSDEEP
6144:RRjjCAZTN3TTiMZk6ympJzejoW4XOMlkaX7T6lXy0dxG1IffO:RRXCAP/emp5jOM+O7TAtU1A
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 5 IoCs
-
Suspicious use of SendNotifyMessage 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\719e531fca7b3c4fbe4b7cf16e8ded4a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\719e531fca7b3c4fbe4b7cf16e8ded4a_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
996KB
-
Filesize
996KB
-
Filesize
996KB
-
Filesize
996KB