Analysis
-
max time kernel
117s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
29/08/2024, 01:19
General
-
Target
c7fc755a0283f8a7bee41614c6ea1b83_JaffaCakes118.exe
-
Size
823KB
-
MD5
c7fc755a0283f8a7bee41614c6ea1b83
-
SHA1
7661b913e58bdf905d3ab740f61d916b1023c017
-
SHA256
29da667cb417c7c09b091791af636d5fb981f6e4e288f7516a1520aceb5cfbeb
-
SHA512
81f1c5d9a50433ed05340a16933d6ee1f15721972ed3257fa188db825e5d904a1d236fc60c36058c492d8c7b523a000a1e9296da32a939171f7b84dcd5b9d331
-
SSDEEP
12288:PBkB61x896pYOKNakAKV79FAK5v33YW/tVxSz/g1DnU8bRK9inQfeipj71:KBux8wpYOtkaAYW7xSz6DnUA+qipF
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 32 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c7fc755a0283f8a7bee41614c6ea1b83_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\c7fc755a0283f8a7bee41614c6ea1b83_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
4KB
-
Filesize
2.5MB
-
Filesize
2.5MB