Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
07/09/2024, 22:56
General
-
Target
d300b74cfbc1222479759f77be1d05e5_JaffaCakes118.exe
-
Size
3.5MB
-
MD5
d300b74cfbc1222479759f77be1d05e5
-
SHA1
d925fd4b19fc48ac9de500dfdcad24263e5bc519
-
SHA256
ecee943e14a0a1508973d70e2379835f47c8424e2757a8fb965bd6fca56c4bbb
-
SHA512
9482290434f35d984b713335320eaa69bf0cb5c8e7f5510032278f72354d90f3fc746e8fac30957f529ae1e219d478637027a40aef8fbbd0a4e5a55af48c3e79
-
SSDEEP
49152:9SEThmPpnaM/twH3sT7vAd57JfMpGILco8VaX+E5PUgmUFuv6L:9zhKdPq3O7cMpLLcEtSgNQSL
Score
7/10
Malware Config
Signatures
-
UPX packed file 6 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d300b74cfbc1222479759f77be1d05e5_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\d300b74cfbc1222479759f77be1d05e5_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.1MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB
-
Filesize
3.1MB