Analysis
-
max time kernel
93s -
max time network
103s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
16-09-2024 06:47
General
-
Target
e437f06a8661256b381a9b986e2ba88b_JaffaCakes118.exe
-
Size
448KB
-
MD5
e437f06a8661256b381a9b986e2ba88b
-
SHA1
54520a4b013308a1809272a29334009f6fc3a3fb
-
SHA256
c6892dddd66e7f045ee18856b6727f83c961c0fa3bf07d46a57981b7fd589563
-
SHA512
69bbcd1df1ba0a8211af84f6a19978292cde2d35226ce5a15a83beaceb88509a750c9dd5b1d73b79252dbd024260c5906cb7a2c8de2528bdb8e5b9fa83353057
-
SSDEEP
12288:QboBb/W9ANGBAFb5i0P6HfewKQLYg0yCxC:4xBAiAHwfzN
Score
10/10
Malware Config
Signatures
-
Trickbot
Developed in 2016, TrickBot is one of the more recent banking Trojans.
-
Dave packer 2 IoCs
Detects executable using a packer named 'Dave' by the community, based on a string at the end.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e437f06a8661256b381a9b986e2ba88b_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\e437f06a8661256b381a9b986e2ba88b_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
192KB
-
Filesize
200KB
-
Filesize
184KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
188KB