Analysis
-
max time kernel
140s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
27/09/2024, 06:42
General
-
Target
f9eaec394fa40cc9efdc540d1c7d86c3_JaffaCakes118.exe
-
Size
372KB
-
MD5
f9eaec394fa40cc9efdc540d1c7d86c3
-
SHA1
0ef50330ae08b157da166347ae9376a2d19d62cb
-
SHA256
14a2cbfc7ac478a9b271d0af0ea391fed6336ffa37ee72fe2266c957ea39a20c
-
SHA512
4cdcad9023c5f05b46e853df5f5bdecf9db7facac166d2a6b68d1cbb6132ef97ea06653c491f8b2aa67d089509307f1d9b4bd7a11004591275c8681cdb282be2
-
SSDEEP
6144:GuJKq3G5Li4VSaIHVhfo6YiBshMPWsAMy6WqzK2ZhlGo8ZcITva+jbpvNU+AbDdq:GuveLlVhGhwwBU+Wsg6WqZZ/GaR+jh2g
Malware Config
Signatures
-
AutoIT Executable 15 IoCs
AutoIT scripts compiled to PE executables.
-
UPX packed file 16 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f9eaec394fa40cc9efdc540d1c7d86c3_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f9eaec394fa40cc9efdc540d1c7d86c3_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
18KB
MD5428d963eb537ef0682d1f158b5e3a87a
SHA1b802a3e74895428fc4edcf7da78a7ca4a48df985
SHA256060a58583fe72c7e254f20774b7b9109f383d8dfba1c130be9f90069b1d66c2b
SHA512f2bcd915b2a20d21ff0d5fceb28bb60966b39430b8303b1cd213f3bce12cdd556e0303d8d006286b08d7d40ce2f20dbc4b5d6e8c1bf6980323ffbde6ba5f5218
-
Filesize
608KB
-
Filesize
608KB
-
Filesize
608KB
-
Filesize
608KB
-
Filesize
608KB
-
Filesize
608KB
-
Filesize
608KB
-
Filesize
608KB
-
Filesize
608KB
-
Filesize
608KB
-
Filesize
608KB
-
Filesize
608KB
-
Filesize
608KB
-
Filesize
608KB
-
Filesize
608KB
-
Filesize
608KB