Analysis
-
max time kernel
93s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19-09-2024 06:07
General
-
Target
eabadca685cbff37048ca3ebb0547e2c_JaffaCakes118.exe
-
Size
122KB
-
MD5
eabadca685cbff37048ca3ebb0547e2c
-
SHA1
a6d62b9383d04a2ca193f0e6c9ab8db390397f73
-
SHA256
2201598e1d1a5e48fabf014e511c54efc4f2e2639a0eb61260244fafed15a73b
-
SHA512
4ef630fdc3d83f2bc3bfff37ddb5a9bce73e5d00e3b97e59fb00d03db206b8c462a010bf2839ebcbce41b50513bd73fdc3ef54424bdb08586a8c57b2f8e2cb7a
-
SSDEEP
1536:f+3UUwNrWgqrD3bZkplN/5XeCQr0CpIhBfxHzezRyuJ:f60NWgcONxXnQr06IhBfxH6zRyq
Score
6/10
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\eabadca685cbff37048ca3ebb0547e2c_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\eabadca685cbff37048ca3ebb0547e2c_JaffaCakes118.exe"1⤵
- Writes to the Master Boot Record (MBR)
- System Location Discovery: System Language Discovery