Analysis
-
max time kernel
114s -
max time network
115s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
10-08-2024 14:26
General
-
Target
86692bf7a257e44e922d9038136b49c5_JaffaCakes118.exe
-
Size
72KB
-
MD5
86692bf7a257e44e922d9038136b49c5
-
SHA1
123248ef822a585aa25e913ebdda684b8e336f56
-
SHA256
b8b4fb66831aadd24ad59e93a030cc1ea1feff27e7858a8eafaf48ce3c8fe916
-
SHA512
209a5bccf3cd301ae7e7a6d15397cadb55835ec6a070534cc3781e038af2004314eb4954e56d52473da6b41c343d903ccd75ac16e8e24234ea50189f6996486b
-
SSDEEP
1536:4mPRqjbIf1w1emabLAXZqd76JXh+BwI5nlV6at9gTkE:TPRCbItwzFZM76JR+BwI5nxgb
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: RenamesItself 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\86692bf7a257e44e922d9038136b49c5_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\86692bf7a257e44e922d9038136b49c5_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- System Location Discovery: System Language Discovery
- Suspicious behavior: RenamesItself
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
12KB
-
Filesize
288KB
-
Filesize
288KB
-
Filesize
288KB
-
Filesize
12KB
-
Filesize
4KB
-
Filesize
288KB
-
Filesize
288KB