Analysis
-
max time kernel
92s -
max time network
119s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
14/09/2024, 13:51
General
-
Target
e05152d126ed06c540ecfb542271af19_JaffaCakes118.exe
-
Size
289KB
-
MD5
e05152d126ed06c540ecfb542271af19
-
SHA1
315e7cb682adb24fddcf262a70686bed87a4363e
-
SHA256
11a9b391fd0ae284c130a83b0c17d9f583a782aca1d361224b8c0aa078643f67
-
SHA512
f75e5fa4a0997867e1dbae0175c2ea28cba8e6a339d7633dc8b65996487ddee399d9697b11f34c8135e9385f2b4b4599f5b8f9c2d1eb0f6e6ebe73106d12d497
-
SSDEEP
6144:oUi0aRHUY1vjapGWCNp/G2H+tv0TBZvZKuJ5:Di0aRHUAjapGWCNp/G2H+tv0TPIuJ5
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e05152d126ed06c540ecfb542271af19_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\e05152d126ed06c540ecfb542271af19_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken