Analysis
-
max time kernel
141s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
22-08-2024 20:58
General
-
Target
b91f2672a377799105d342f4ac6fbbd5_JaffaCakes118.exe
-
Size
237KB
-
MD5
b91f2672a377799105d342f4ac6fbbd5
-
SHA1
a2eb36ce7b3f3fe55d3ce9dfb8afc3c19628bb6a
-
SHA256
a77936c9eb90e6f77024c12061404a3cc6aec0919e17a86c4f03a435e5799477
-
SHA512
a6613bd501368d73ea74dcf8b5fb9ea3d2e49d9ac39f368db7600aaebc1b2364de9c2964e4df33013bea20ebb8de37e2a691c752b8397bbf31f9ca8ae42b2f62
-
SSDEEP
6144:k8ySHSpEAdCU1fORZNTlWhdHrjcAZ9t7Ek:5yTlwSvcM7Ek
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b91f2672a377799105d342f4ac6fbbd5_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b91f2672a377799105d342f4ac6fbbd5_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
584KB
-
Filesize
12KB
-
Filesize
4KB
-
Filesize
584KB
-
Filesize
4KB