Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
20/08/2024, 00:39
General
-
Target
ad3c7b62dcf6e901a793b9b8a6bd61c5_JaffaCakes118.exe
-
Size
694KB
-
MD5
ad3c7b62dcf6e901a793b9b8a6bd61c5
-
SHA1
0125a7e7aded1f405ea04da2af28159c71ecfafb
-
SHA256
25325156bb96f6074f1c5bde44cb1565fd4bdc2f4ba51ab1c81d268e2b72789a
-
SHA512
ccd38c2ed0322aac6eda439bed6a90801447a890fc6569133edca5c73c81f52f8dc724f15cd04f0a12c9572962501ca223cf42874dee7d906f8020a328be9784
-
SSDEEP
12288:/40hw0EiJXxRyNOyhdrnJ9N43QRk5SlKELGf0UGZregK1sLJ4htPO/KcE7:/4aw0E0RyRzJ923QR7lzLGcxregK1sLm
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ad3c7b62dcf6e901a793b9b8a6bd61c5_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ad3c7b62dcf6e901a793b9b8a6bd61c5_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB