Analysis
-
max time kernel
141s -
max time network
143s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
19-09-2024 07:03
General
-
Target
eacfdf1ec1a3c02f00a19f1ddda59c7a_JaffaCakes118.exe
-
Size
63KB
-
MD5
eacfdf1ec1a3c02f00a19f1ddda59c7a
-
SHA1
6f2be123bf3f0b621440e9713c326b3dc3e3bb6d
-
SHA256
96af375b9e3adbc020c57f96ee11a8adc53c96f41897f1ca1885af4113b00a2c
-
SHA512
612f5ed668ae02bfb661c14632df5b60957b4e73516ddd27e1852de9bd800f7a2e341f0c9efb77f6aa7389c1c8a8a756621f6438cb78c3c0783a20d64978e0a9
-
SSDEEP
768:LT0jzJUvzEY5IfdDqX188Kw+GfErCLb5z6TTUb3qFpPbl89kErv2jcHP3Qm:f0XJT++M1JKwTsmLb52TCWpjeU03x
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\eacfdf1ec1a3c02f00a19f1ddda59c7a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\eacfdf1ec1a3c02f00a19f1ddda59c7a_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
20KB
-
Filesize
72KB
-
Filesize
20KB