Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
09-09-2024 18:47
General
-
Target
d6e5dd48b8122404b4ac956c2607f957_JaffaCakes118.exe
-
Size
9KB
-
MD5
d6e5dd48b8122404b4ac956c2607f957
-
SHA1
650fe672492cbb38fe12f8355bbea83daf954a49
-
SHA256
c257b58b6f16efe3243e1af0df83cc64a5a57d7f52bd227eb52be0f8dd092c32
-
SHA512
19a3adaf2e25e4e70c65ceb1544581ab712d53c29179ce24fd2f274f32cca15b853acba87d697188037e4fb71afd55e03542c5b0a6cedb2464ff5f4edf40f084
-
SSDEEP
192:Ni0zwbNjRLkdaDlMF5hsmq2RRn0swZBpdI3Bc97zJWn8I8BSaW:Ni0zwbNf5qR0swZBpd59JWn8I8BBW
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d6e5dd48b8122404b4ac956c2607f957_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\d6e5dd48b8122404b4ac956c2607f957_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken