Analysis
-
max time kernel
96s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
28/09/2024, 22:42
General
-
Target
fd4999bcbfefb6ffa8d77842646cc473_JaffaCakes118.exe
-
Size
196KB
-
MD5
fd4999bcbfefb6ffa8d77842646cc473
-
SHA1
818fa98cf7f00787c2c1910df9d690b4f4cb919f
-
SHA256
e61c9189aea6fbf278c49d7dab83e2f56ca70ef9575ebdf0691b17a4a9e60a7e
-
SHA512
2fa9292f69eface3439fe1ce6c621bf3c56cce77a9f723f8891d2d9a736553b2022d0bc86ea832de2ecb232718464b2080ea975c497ab681c9527afc8b970c03
-
SSDEEP
6144:8u3QelyRW3UX3Z6etibRIP9tlnDZG1xYWhNO8NOqGAkh:8UvuW32Z61dGhZafXNOFAkh
Score
7/10
Malware Config
Signatures
-
Unexpected DNS network traffic destination 1 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fd4999bcbfefb6ffa8d77842646cc473_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\fd4999bcbfefb6ffa8d77842646cc473_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
308KB
-
Filesize
16KB
-
Filesize
308KB
-
Filesize
308KB
-
Filesize
308KB
-
Filesize
16KB