Analysis
-
max time kernel
142s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
20/08/2024, 08:44
General
-
Target
ae8fd9a47bfbaa4bf009877807eeed10_JaffaCakes118.exe
-
Size
64KB
-
MD5
ae8fd9a47bfbaa4bf009877807eeed10
-
SHA1
b3b168157f574817333924a79c823b28a07ad59e
-
SHA256
9561600f5648bf9510d3288bc54410bc34ba8964c5b85a278bee8548b9e888dc
-
SHA512
627ca469228a899f40e489d605149ecbc968f70b11fe074653071b356b582bcfaa75ca252978a55b8c6bfc1fcc4ac5cbf1c154a7ef9bc24aa3bcaf19c4b33dc7
-
SSDEEP
768:Bat1YV3e7FYG84iaO0xzWrtReF3YWur2ZGBVOZ:e1YVOZ+70xqBE9ur3bQ
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies Internet Explorer settings 1 TTPs 5 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ae8fd9a47bfbaa4bf009877807eeed10_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ae8fd9a47bfbaa4bf009877807eeed10_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
72KB
-
Filesize
72KB
-
Filesize
72KB
-
Filesize
72KB
-
Filesize
72KB
-
Filesize
72KB
-
Filesize
72KB