Analysis
-
max time kernel
140s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
26/07/2024, 06:29
General
-
Target
72eed121a3a09f67b717d13c8399920f_JaffaCakes118.exe
-
Size
38KB
-
MD5
72eed121a3a09f67b717d13c8399920f
-
SHA1
1ad131a04702197d131af27294086412f508d2cb
-
SHA256
4134d68da41f67fcf0bd1703b8c0a7b44702aa3372e19ecc41cf34cd04468350
-
SHA512
fae457f1ea629feccb1ab73b017e322848ed28c5c08bf89b2bd5c157b02f9f01ea3fca5b13587b04973c230ba3f059b9209d332acacc78d9742605a3bc8fc2f6
-
SSDEEP
768:vFe7tEyaKaorzIgQGgV7qw2qqoA4QW8UnY:NcaKaorzIgzgZqw9qR4QIY
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\72eed121a3a09f67b717d13c8399920f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\72eed121a3a09f67b717d13c8399920f_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
-
Filesize
68KB