Analysis
-
max time kernel
140s -
max time network
100s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19-09-2024 04:55
General
-
Target
eaa0229e407ec5e2d31853eac5f18f4c_JaffaCakes118.exe
-
Size
86KB
-
MD5
eaa0229e407ec5e2d31853eac5f18f4c
-
SHA1
b32714a46f1cd79d33a4f43a06e23e9d05549f2f
-
SHA256
50a6f3fa28e0e5177a8bfddbfaf39f9fdbdc27f6b855111cb4e9b90ae2cfce9b
-
SHA512
ee2c140aee98a7b426e0628bf1bfead3a6c3a1f262aec9e036aca642ed48f564f43954eb86b45c17d7ccb3c29dc9f253be2b9e363d4199e95733b770307da1e5
-
SSDEEP
1536:Fe5Kp8mX015OOgWZps9y972XlNBAhT67MuNpiWtw70CYQyB9PSYiK7v+SgAEoTtW:4EmmU5gSsU9GlNB+T67MuN/OQv34K7v8
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\eaa0229e407ec5e2d31853eac5f18f4c_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\eaa0229e407ec5e2d31853eac5f18f4c_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
216KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
216KB
-
Filesize
4KB
-
Filesize
4KB