Analysis
-
max time kernel
94s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
06/09/2024, 01:23
General
-
Target
ce54521eeef203bb14bdbd6c22f3f742_JaffaCakes118.exe
-
Size
26KB
-
MD5
ce54521eeef203bb14bdbd6c22f3f742
-
SHA1
b24e63282e779d5fbaa5b7cec63f0bbd0be1a23f
-
SHA256
1a5a1272ed0c5af68e9b9ff83142cd3019e5d01d377800c1c2b1a1d236a26278
-
SHA512
6db5b147a9c921481e10f8cd50f26f84b65e1494d53b580bc2bf0244657da051d94b1298a7d9b4f6ac224a49273898503683ad38ab49c4881f53ef96dbbd3e15
-
SSDEEP
384:9iG6c51Q9rP+9amlFTz0IgSfYST1lqdm5o7NLdvUj8INrwgZR/H+J6Z8:pA5InFnESfYw+m5ybvG9rFH+
Score
10/10
Malware Config
Extracted
Credentials
Protocol: ftp- Host:
tzdesign.dtn.ru - Port:
21 - Username:
u327647 - Password:
vljj3hyb
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ce54521eeef203bb14bdbd6c22f3f742_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ce54521eeef203bb14bdbd6c22f3f742_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
328KB
-
Filesize
328KB