Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
26/07/2024, 10:45
General
-
Target
73b7ddabf675ca2d58a79b3edf45da32_JaffaCakes118.exe
-
Size
178KB
-
MD5
73b7ddabf675ca2d58a79b3edf45da32
-
SHA1
ae6fc7ea40271f1805a9c435cd37ef93f26eb478
-
SHA256
6ecd9e4891ee35776f4094870f5fec73e1912b9b63629268a92261674c6eba6b
-
SHA512
2d57deb64681f1d747461968b16b5fa82a8eb81658335d039a8118329ce31ac231472124362520a822770d65f482c14beb412626756825371b3aa9e50cd726ed
-
SSDEEP
3072:u0Gox2PD7tC6PN5k/WqGIvMEhc+5n6CdJK8GcBHNmjoH90DGzhQ:6ogPGWqGU/n6CbzGcBIMHIGl
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Windows directory 6 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies Internet Explorer settings 1 TTPs 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\73b7ddabf675ca2d58a79b3edf45da32_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\73b7ddabf675ca2d58a79b3edf45da32_JaffaCakes118.exe"1⤵
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Windows\Bnynua.exeC:\Windows\Bnynua.exe2⤵
- Executes dropped EXE
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
178KB
MD573b7ddabf675ca2d58a79b3edf45da32
SHA1ae6fc7ea40271f1805a9c435cd37ef93f26eb478
SHA2566ecd9e4891ee35776f4094870f5fec73e1912b9b63629268a92261674c6eba6b
SHA5122d57deb64681f1d747461968b16b5fa82a8eb81658335d039a8118329ce31ac231472124362520a822770d65f482c14beb412626756825371b3aa9e50cd726ed
-
Filesize
390B
MD523f7c0ec479c225594c0f582441703b0
SHA14aee406a0ffd6023f1c1b70ce4b2f1067aa1d8fa
SHA256695c2221ffe4bf8c363a205921a38bec86ce30a68cd736fba35e93df7d88dbb7
SHA5126137067eca36a1e26a34d70be5ed0038db9c04b2757dc1d137a2d35022e2b1d874e1c9825a1e1eed5aae03215b4e56c9b94ecd6c468b8caf09cd7757e2c11068
-
Filesize
252KB
-
Filesize
84KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB