Analysis
-
max time kernel
148s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
09-09-2024 20:17
General
-
Target
d7075adfcc49afbe54eeee05edea100a_JaffaCakes118.exe
-
Size
177KB
-
MD5
d7075adfcc49afbe54eeee05edea100a
-
SHA1
24bd371222f356e171e404e9c2a41657e3751330
-
SHA256
7d943ffefae587b007d4c320febbbbb37fb5508e0712eb05ae25622135a43944
-
SHA512
508d8ded45be190a3b9146ab31fb1959f7efe33fc75f43a4b1bffe4296d16f4db8a2b9e329ac57a1b7489c5fd7b48046716d0bd92bba9b5cf5ea78e3ec1775a7
-
SSDEEP
3072:y5VTs2dzJpdQ12drw4GwLW+ICXeMie6C2ot5TU1D7YUZrGhjAtzMO4GUF+G8oiAz:ybdzDq/31oM1D7YU0Iz54GUFgxAxqGB/
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d7075adfcc49afbe54eeee05edea100a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\d7075adfcc49afbe54eeee05edea100a_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken