Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
25-09-2024 14:43
General
-
Target
f63cf673c657c4e270cd1a5f99b1a073_JaffaCakes118.exe
-
Size
1.3MB
-
MD5
f63cf673c657c4e270cd1a5f99b1a073
-
SHA1
e5b6d55ff73b361f24acae40c6a46a675dd4fd7e
-
SHA256
fabcd775df324d442b3d8f9dde456ce1a890d93f96ba021d8600f42c31125d47
-
SHA512
943d6c1bbcb6e3d9a6c809263aa5a5d52de317d22b6029efa14ef79d3d82238aed0d9cd289939e1643e530a45803f8b799d7d7717d4fe3a671ef500eb9c7ae2d
-
SSDEEP
24576:JQCxVclCQASgv5EH8e+909lecl7DL+fKf8/0ulqK5bo:JQ2Vc2Zv5EcZ9Olecl7+Kf8rV8
Malware Config
Signatures
-
Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Themida packer 2 IoCs
Detects Themida, an advanced Windows software protection system.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\f63cf673c657c4e270cd1a5f99b1a073_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f63cf673c657c4e270cd1a5f99b1a073_JaffaCakes118.exe"1⤵
- Identifies Wine through registry keys
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.3MB
-
Filesize
4KB
-
Filesize
964KB
-
Filesize
1.3MB
-
Filesize
4KB