Analysis
-
max time kernel
94s -
max time network
102s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
25-09-2024 04:30
General
-
Target
f5302106ba6da39fe955021df9db8082_JaffaCakes118.exe
-
Size
234KB
-
MD5
f5302106ba6da39fe955021df9db8082
-
SHA1
456fd4a7de7f09db116c6498bc9c6cd90dcce214
-
SHA256
d48727d0cdbddbb2a9df0344621ee31c8a1e225e8a3b9b01b6ea83cc20af26e7
-
SHA512
4137c87123fedc4e6b102a6bd6e331eeee9d1de4b7437ff3d74cf43c89ab8a8dc48d696bbd6012288eb257793e69ff700c2c68e1188e513a3046ff341f24145b
-
SSDEEP
3072:Z45BRdJaToEKapOrGn0Yi1SOg7YImlALgUV42sjnxwUSk5kA/yos4oVsL:ZaneodaMr8ti1pgEzUV42u35kA64I+
Malware Config
Signatures
-
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
UPX packed file 9 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\f5302106ba6da39fe955021df9db8082_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f5302106ba6da39fe955021df9db8082_JaffaCakes118.exe"1⤵
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
688KB
-
Filesize
4KB
-
Filesize
688KB
-
Filesize
688KB
-
Filesize
4KB
-
Filesize
688KB
-
Filesize
688KB
-
Filesize
688KB
-
Filesize
688KB
-
Filesize
688KB
-
Filesize
688KB