Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240730-en -
resource tags
-
submitted
02/08/2024, 02:31
General
-
Target
82b5ba82e4037e45a6e70ec1608b27e4_JaffaCakes118.exe
-
Size
53KB
-
MD5
82b5ba82e4037e45a6e70ec1608b27e4
-
SHA1
1fff0e3169a9910968bd19e9a6036fda983dc6b9
-
SHA256
c9ad949a3045589d743aa22a761b8f6b66158c80a4f92db89ca5feaec724add2
-
SHA512
8becfb9d557be9094e430e3410d6004638a335313342a54de9260745ff9964d3267c77ca6afaf0383068469a1450eafe020a0d3548f591d7fe7ed55fa57bb882
-
SSDEEP
1536:2B31+h8alTCDGPwoHGDf6WqMH/QfqCa+G63Hb:2B3MhNQGP52fqo/wzb
Score
7/10
Malware Config
Signatures
-
UPX packed file 16 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\82b5ba82e4037e45a6e70ec1608b27e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\82b5ba82e4037e45a6e70ec1608b27e4_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x4f8 0x5041⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
320KB
-
Filesize
320KB
-
Filesize
320KB
-
Filesize
320KB
-
Filesize
320KB
-
Filesize
320KB
-
Filesize
320KB
-
Filesize
320KB
-
Filesize
320KB
-
Filesize
320KB
-
Filesize
320KB
-
Filesize
320KB
-
Filesize
320KB
-
Filesize
320KB
-
Filesize
320KB
-
Filesize
320KB