Analysis
-
max time kernel
140s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19/08/2024, 17:39
General
-
Target
abf3221ee5fef4aa5c4998eec14df4c7_JaffaCakes118.exe
-
Size
143KB
-
MD5
abf3221ee5fef4aa5c4998eec14df4c7
-
SHA1
441b7c2bed8e9e54e7ee3d69060b1b91785e59ca
-
SHA256
953931a0eeb29b08961e66a461f985e3919f229def9496242a77385e219a5f3c
-
SHA512
aa63d06a9a40b99d7e7d94a1a303160e1dfe18ef78d9dd74bf38ca127ddc1957b1d00993c6638f3da40af9460680657a3b689d3d4168a703687a487eb9969f75
-
SSDEEP
3072:TWCatX3+RmgXUgOgRfFpibD+r/hGZp0lg:TWddgXUgVBibDW/8Y6
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\abf3221ee5fef4aa5c4998eec14df4c7_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\abf3221ee5fef4aa5c4998eec14df4c7_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x2c8 0x2f81⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
282KB
-
Filesize
4KB
-
Filesize
282KB
-
Filesize
282KB
-
Filesize
282KB
-
Filesize
282KB
-
Filesize
282KB
-
Filesize
282KB
-
Filesize
282KB
-
Filesize
282KB
-
Filesize
282KB
-
Filesize
282KB
-
Filesize
282KB
-
Filesize
282KB
-
Filesize
282KB
-
Filesize
282KB
-
Filesize
282KB