Analysis
-
max time kernel
142s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
11/09/2024, 05:37
General
-
Target
d9b6b4b6e5812cf2e1e41957f85bf958_JaffaCakes118.exe
-
Size
753KB
-
MD5
d9b6b4b6e5812cf2e1e41957f85bf958
-
SHA1
91d0cc8b972e8eb178d9b9ee8508222d7a054d0b
-
SHA256
f6729d7fb00b0d73f90bdcdd8887e99f02cd5c48eb3079e60f1905a0c6006d83
-
SHA512
237c6f6f65737bb6d823c7279295f4ee6476286048e6411fd9d5fba4ae882ff90eb0983cb8c004e66c8fe107ff3ec367d2f0929afdde54ab9a410350b9cc435b
-
SSDEEP
12288:d646Qk7j5abIN009s4gZJt87NPXJT8HLp5O30b1fkcRSVc04v1W8glrY7a:BV45az0eLJ2954yEJf7vw/x
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 28 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d9b6b4b6e5812cf2e1e41957f85bf958_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\d9b6b4b6e5812cf2e1e41957f85bf958_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
776KB
-
Filesize
4KB