Analysis
-
max time kernel
139s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
17/08/2024, 07:48
General
-
Target
a1ba30a5b31faffac62272d22ed21d81_JaffaCakes118.exe
-
Size
55KB
-
MD5
a1ba30a5b31faffac62272d22ed21d81
-
SHA1
db745b96cfd5804c2568316b1c7e5c2ba1546312
-
SHA256
58b71c47d06ba789e879768ebeb69bab545444f2da0da6673d23702a85630b2e
-
SHA512
029faf650fd26484c46331ae0e2a565cfe18d1a65cb06750f35cb7bb5f51ef4dd9b63f767269489a0480bd3059bfc35009cd311d2d5048c910b33d5265ab05d4
-
SSDEEP
1536:4CKoLD+h/84UimkdxMDbEzctopxyLtNG4cx:4CKomy45ZIne72tN6
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\a1ba30a5b31faffac62272d22ed21d81_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\a1ba30a5b31faffac62272d22ed21d81_JaffaCakes118.exe"2⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
34KB
-
Filesize
76KB
-
Filesize
34KB
-
Filesize
76KB
-
Filesize
28KB
-
Filesize
4KB