Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
23/08/2024, 09:55
General
-
Target
bb412b66ca106ffc99a47bb20a85aec4_JaffaCakes118.exe
-
Size
1.8MB
-
MD5
bb412b66ca106ffc99a47bb20a85aec4
-
SHA1
f91f78ba5b07abbe16ddaa7e1b83789b4c78d7e5
-
SHA256
04cae6d813dbeb8b631db62f69c070243a5aa5413fe24813831cc775f5f353d3
-
SHA512
33e478d3236ad80d2f275dc8a9e423b0406263cfd819cc2bfde8ceda48f9f0dfc5c3043af896713fbb5633019cc352e1b4103f42f02c2cddedbb31a77e4372d2
-
SSDEEP
49152:mjMBLFJF4iFzkkAvPiR4NbH1pAvxefAz2g:mjMBZVFzkFPO8bbUxxzR
Score
7/10
Malware Config
Signatures
-
Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\bb412b66ca106ffc99a47bb20a85aec4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\bb412b66ca106ffc99a47bb20a85aec4_JaffaCakes118.exe"1⤵
- Identifies Wine through registry keys
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
-
Filesize
4KB
-
Filesize
1.5MB
-
Filesize
1.8MB
-
Filesize
4KB