Analysis
-
max time kernel
13s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
12/08/2024, 03:26
General
-
Target
8d1fa65d80356d7ef6fc6250fa17b9c2_JaffaCakes118.exe
-
Size
33KB
-
MD5
8d1fa65d80356d7ef6fc6250fa17b9c2
-
SHA1
e2382009d389c9ab8dab1e4ad872cb621dcd0668
-
SHA256
b580eaf8543be888ec156af147de7119e1193a88c2fb772a7f25cee153dd92f1
-
SHA512
3b2f37d65ca69b297b26b7ddacde692ffc38a10df353c97c730c9682780f39a762edb6bf61e91940a06e66b8209cee399aa79f7dd327788bcd9c2c2123603054
-
SSDEEP
768:OnQOVi6GDiwJbwRVObGFwFwjBtgz03JGgJxrLoIW:POViSNZE03J7s
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\8d1fa65d80356d7ef6fc6250fa17b9c2_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\8d1fa65d80356d7ef6fc6250fa17b9c2_JaffaCakes118.exe"2⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
44KB
-
Filesize
76KB
-
Filesize
44KB
-
Filesize
28KB
-
Filesize
4KB