Analysis
-
max time kernel
132s -
max time network
103s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
17/08/2024, 13:02
General
-
Target
a2a16940016f21b94b18e71bc02c3253_JaffaCakes118.exe
-
Size
530KB
-
MD5
a2a16940016f21b94b18e71bc02c3253
-
SHA1
3b7e06f91019e8e829fdc960f64dd2a69df27a8d
-
SHA256
59dc4c0d6e48228d8ea09e9d50b329ef96b63440a9d83b6bc41ba9b7fd123040
-
SHA512
6322ab11c4e184d6921040622a8bc170228d1c1e3489e3ed637f521c38e6ba885b0154de72bb855dcf694c77998a88f60a9cd57b437bdd3aaf064f1a5c847dfb
-
SSDEEP
12288:Hw1dILPAX8ln6aB4WP3E29V8S4Dhg0fn2J6Z2SLqF4T21X02rpMIzoZVnA7jI8Rh:Hw1dILPAX8ln6aB4WP3E29V8S4Dhg0fK
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\a2a16940016f21b94b18e71bc02c3253_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\a2a16940016f21b94b18e71bc02c3253_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
392KB
-
Filesize
392KB