Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
25-09-2024 09:43
General
-
Target
f5bb0c7f74c9e7ced21a7584e24b3099_JaffaCakes118.exe
-
Size
290KB
-
MD5
f5bb0c7f74c9e7ced21a7584e24b3099
-
SHA1
854e78b03b02ad3b4c8ae000ae622b8f5ed069d4
-
SHA256
455ae95acc1141e80e1e3c0a631f8b78d4ba0e46fa2e36d44cb2a689388dd7c2
-
SHA512
d19fcd65aaba5a669bac052909f6364f65dceb4b8e75d71fe2327052e84583ec4aae29c5fb9ad8f7a14d24b6e0e093cd120864bc7e6b644432ad8bcdc63a5700
-
SSDEEP
1536:mlpEE9e3KjfvSH0DQy+e3Xc5bU/0gmiya+pH:8aEDSct+enKbU/rj8H
Score
6/10
Malware Config
Signatures
-
Accesses Microsoft Outlook profiles 1 TTPs 1 IoCs
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
outlook_win_path 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f5bb0c7f74c9e7ced21a7584e24b3099_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f5bb0c7f74c9e7ced21a7584e24b3099_JaffaCakes118.exe"1⤵
- Accesses Microsoft Outlook profiles
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- outlook_win_path
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
336KB
-
Filesize
336KB
-
Filesize
336KB
-
Filesize
336KB