Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
09-09-2024 16:43
General
-
Target
d6b7677d5625407b48cfb5c83a12bd8b_JaffaCakes118.exe
-
Size
236KB
-
MD5
d6b7677d5625407b48cfb5c83a12bd8b
-
SHA1
4f229c71bf063f9bbc3c23a440d2e054a2463980
-
SHA256
afeb0e80539ed1496b0f5aa499404873ef7bdf535419e781acaa566d133aad2b
-
SHA512
15476f6f8b67a075e1b1f1b4f7aa2b59061dca57f2f950daf62f38d436b55333b8668ba8b89026d8a12ce58c789761a6c151e393a8ad379140bd5c512df1f493
-
SSDEEP
6144:YL/4gIi0FcKgY4QXlksfDQ93ha4l0uYnjXzLxnRLU/:YTWcKh1XlksERha97xR4/
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
UPX packed file 8 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\d6b7677d5625407b48cfb5c83a12bd8b_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\d6b7677d5625407b48cfb5c83a12bd8b_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
544KB
-
Filesize
544KB
-
Filesize
544KB
-
Filesize
544KB
-
Filesize
544KB
-
Filesize
544KB
-
Filesize
544KB
-
Filesize
544KB