Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
27-09-2024 20:21
General
-
Target
fad96b7c45261d16098a7bfafb8ae7d1_JaffaCakes118.exe
-
Size
56KB
-
MD5
fad96b7c45261d16098a7bfafb8ae7d1
-
SHA1
eb32f6cc645d54eaf1a69f0b3ba14121f0f2e7db
-
SHA256
fa7e197319d4d430ec76b53d12b9926aae425d9b235faab068e175250e2fa016
-
SHA512
ddfd6d6e07b42e4e482d2c7765b48b1b6ed91f298b4d78d4bf43fa8ca7f88ecc5bdc438e9ffd0e9a58d20ef4aa831ac73ba8ca06f1699e6428104ebb754c1c1d
-
SSDEEP
768:Z+h7TzTBziifTeiZSVWihwEknh0L7OTLeNfQfRwlbqcRR1gfbQcaajx4oqHDKWMl:kZ/nEkh8OTKN7bZD1IcZUx4XKpoQ
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\fad96b7c45261d16098a7bfafb8ae7d1_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\fad96b7c45261d16098a7bfafb8ae7d1_JaffaCakes118.exe"2⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
28KB
-
Filesize
4KB
-
Filesize
36KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
36KB