Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
26/07/2024, 09:12
General
-
Target
736d64761014116fd3e4f03088fe2c15_JaffaCakes118.exe
-
Size
25KB
-
MD5
736d64761014116fd3e4f03088fe2c15
-
SHA1
0d909a5cf976c60d08bddb2114efb3338d6253bc
-
SHA256
5f5b2131c268203dd564f7f3cddee6a484c202eb549d43ffe6e210a2bc881250
-
SHA512
eb05134284ee0d67946b093458f5f1a27cd07f5fc4760bd514173837b338df0352379bc247af23f69e15b36c326e66200adf108362ba2b849c703e3c71fc8123
-
SSDEEP
192:iOovrqyS06V/YJs0nuVoeVqFow6G7e2B0pZHaDBYwrBR+lF0VoSN/5G9wywaqL/8:lMuX5oF/DBYyBRzN/5G9wpL0lHipIp
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\736d64761014116fd3e4f03088fe2c15_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\736d64761014116fd3e4f03088fe2c15_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
18KB
MD5db9e8970aaca13d8a63f1da2228146fc
SHA12249e7bf9a6bc396ad97f6de8b168c9d68ca9524
SHA25682280983df24017b1ed8399f14437f4e6cb0270ca3c888034f47a315ef894800
SHA512fd508de91af07abb1c94099fd677907a8725d12520567e402669a564d4ceb91cf7e0c565ff7f263e84c9b4af4ef8dfbce4c14301148aa1a91845a92ecb24fdca
-
Filesize
18KB
MD564c8ee678fe79e5415091d307bf7341c
SHA193806c87679239c973b7abede340fedfcf336b76
SHA2565fe3cb186da2c15a1c3ce0f078482db0e7212770249936b52189ff4627e3d9cc
SHA512cffdc0b39b6d41c310adf319f07996ea19f9ecef768bc2e2e984afa5fa31869dac4a7a934070c75db98f8b64c6a8162b3d95d572af8a3dc18343745a768a9ce1
-
Filesize
8KB
-
Filesize
8KB