Analysis
-
max time kernel
141s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
28-09-2024 04:34
General
-
Target
fb82dd744a00b95d02f78d088c07da89_JaffaCakes118.exe
-
Size
577KB
-
MD5
fb82dd744a00b95d02f78d088c07da89
-
SHA1
c6c24cf23ca8987edacc8f5316ac27f5eb3b557f
-
SHA256
893947011b0ac5950b6406d04fe250b1bacc0d8e3ea7426124525f655330753c
-
SHA512
376c985baa8562ce26d67b37d7ea7c47d6b69f61f41e231570921e4bb67c1080374d85ba8a84b500af9ea8c8c8a7de7e4d96edb50f4170ab5575a78ee7d68f57
-
SSDEEP
12288:KJgvzDvDktwRNWo8LIzFg53GpWj6ElR+2I7:OgzMw7s2jW2EHC
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Drops file in Windows directory 2 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 5 IoCs
-
Suspicious use of SendNotifyMessage 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fb82dd744a00b95d02f78d088c07da89_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\fb82dd744a00b95d02f78d088c07da89_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
604KB
-
Filesize
604KB
-
Filesize
604KB