Analysis
-
max time kernel
94s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
25/09/2024, 05:36
General
-
Target
f54d8c6b2eb20288921d576c9cd90f38_JaffaCakes118.exe
-
Size
140KB
-
MD5
f54d8c6b2eb20288921d576c9cd90f38
-
SHA1
c3ae88a7246e0a4b606f4e37a399aa2445bfa316
-
SHA256
4635fcafeb21b8f0da96e01a1a86725826aef1242cc5090556cf6dd87d49faee
-
SHA512
0d01f6a32341a1fa27f78c3d52da70b022ab77b0205218506a17c1b947c78a1f8fc168e8aa69493b8b11fc46213b3cf4119e67483ef2d72d728938328a318e2f
-
SSDEEP
3072:lt+zTFQL1c8uRX5qH/n7trI/SeyAm6a5fT/+CGqnP8tylL/Jxj7:XUFU15unW7NevmDS52kUl7
Score
8/10
Malware Config
Signatures
-
Modifies RDP port number used by Windows 1 TTPs
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\f54d8c6b2eb20288921d576c9cd90f38_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f54d8c6b2eb20288921d576c9cd90f38_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
380KB
-
Filesize
380KB
-
Filesize
380KB