Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
17/08/2024, 21:00
General
-
Target
a42196bd904c3ef30e0d22460e460b99_JaffaCakes118.exe
-
Size
58KB
-
MD5
a42196bd904c3ef30e0d22460e460b99
-
SHA1
c9f7369a7d5ad50a70ae9b922a1399f2ba8da35a
-
SHA256
8fec1e49883eccc1539e90a6e9586f6f1c7ded0a8f7e3a4de8f25eec7df02f7d
-
SHA512
3a28f04a6c2c18323439b7a3aab45f9562b33eb2c457fdba47df490e601e7a6f044ff20aad7140d72051616bdb5c8948d9b1dceb8e7f5cda65ec2b2dbf022413
-
SSDEEP
768:eSD95tA1a9L2FzEO5XZd8t7mlgLoUjigvaoMvaLPzPPrHDtzklMB78TgNJ:eSR5Aa9L2FzEO5XZ4MmtvbrXNwlNi
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a42196bd904c3ef30e0d22460e460b99_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\a42196bd904c3ef30e0d22460e460b99_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow