Analysis
-
max time kernel
150s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
07-09-2024 19:41
General
-
Target
d2b2320d636d841a7057b7457da8ac7a_JaffaCakes118.exe
-
Size
1.5MB
-
MD5
d2b2320d636d841a7057b7457da8ac7a
-
SHA1
73d569f92080ddf7ef770d6a9f0e1fa4cc25ac28
-
SHA256
8178a4bc85b0f09b549be249e77ac6b071b6d9a67bc065afb795e0f3c3da1fea
-
SHA512
3c3e112c6f5c3eac3618e95ffd08c97906a2b5389a0d680f15208457f9197b4b545c9c38267f12f2233927488335978e7065ea090f40a27a03e615c339afb187
-
SSDEEP
24576:HL59d5HT7i1sDGy3oneyiGfCCTNQype1bPSJdcLhAC7o3M0dXHJoog73v4wSsrq6:HFpW1sCriGft5Q96JkXoXlK3AwSMqDG
Malware Config
Signatures
-
Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d2b2320d636d841a7057b7457da8ac7a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\d2b2320d636d841a7057b7457da8ac7a_JaffaCakes118.exe"1⤵
- Checks BIOS information in registry
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
484KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB