Analysis
-
max time kernel
111s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
09/09/2024, 20:51
General
-
Target
d712f06be4c568f985ef034beb15b709_JaffaCakes118.exe
-
Size
112KB
-
MD5
d712f06be4c568f985ef034beb15b709
-
SHA1
812a8347d357710ac89c448d7ec12b28731a55b5
-
SHA256
b300675913bdf59cfe3caf32a81a40725a5859d514254034e871eccc6effcb7f
-
SHA512
d27c6b6564af6617e5ba41477861264cbd9cb7cd60dae3bf747c64bc3cb4e63c8d0806c0cafb9f15d0d93b85ac1d3b4587799bb6afc877d14c58a0832542888a
-
SSDEEP
1536:D29ljIovvnYiOo9KiY+qNAJZ1/WXhhBmrO+afR/lWR0IHW6pl:DG/I/owcZ1ghhBmK+aXWmIHt
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d712f06be4c568f985ef034beb15b709_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\d712f06be4c568f985ef034beb15b709_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken