Analysis
-
max time kernel
148s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
12-08-2024 11:06
General
-
Target
8e80117f6e27c2fd0c4046a5b232e58e_JaffaCakes118.exe
-
Size
506KB
-
MD5
8e80117f6e27c2fd0c4046a5b232e58e
-
SHA1
bde5ed002d0b4b42d48c16b018787d10e94f85d6
-
SHA256
72671b89c33439b41bc37cf5b2350acce694fdef87ca8a82cab42b638f77a77f
-
SHA512
d5a2c5fc5be5a56e345ed897be186adee5d04dac987fb62d1a1b46d6577797dc5c482d68265cce72e540af8584f8c3b21caf8d6561a544b351fe0f64c24fd146
-
SSDEEP
12288:Xqh18MBYgzOQbe07i/xoA5b+WuQ/SkKp0rL2gI5d1:6YmOQbt76JHuOSPpW2gqd1
Score
7/10
Malware Config
Signatures
-
UPX packed file 8 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8e80117f6e27c2fd0c4046a5b232e58e_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\8e80117f6e27c2fd0c4046a5b232e58e_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
-
Filesize
4KB
-
Filesize
2.1MB
-
Filesize
4KB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
2.1MB