Analysis
-
max time kernel
147s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
28-09-2024 14:31
General
-
Target
fc7f53497b9287e6f9c48e4d0e81520b_JaffaCakes118.exe
-
Size
40KB
-
MD5
fc7f53497b9287e6f9c48e4d0e81520b
-
SHA1
ae779f62c23c34350ff30e61042d7b449eb40762
-
SHA256
298d1b2eff82a81a0f04a11c39b6166fcf45439f8e24bfa320587d9e02a72a8e
-
SHA512
03374dcd4b02389b995249bbb37ef006d271aaf5903f232d1e4f0c8888dfbbca765e2ef0ae46d82ae8f6620006a7e7382a02d4f6f38ad90cf8c290b1f9061a46
-
SSDEEP
768:KpD+Zwq3r1uFbaYh+Jnq7az+xRug+n2hpUE+fDNkQp6HwfCiQLzR:wD+HZuY5q7az+GgDbUfZkQTfCiQLzR
Score
10/10
Malware Config
Extracted
Family
njrat
Version
0.7d
Botnet
B HAT
Mutex
1fcb8fb3a4794ae29f1b8ef01d138a35
Attributes
-
reg_key
1fcb8fb3a4794ae29f1b8ef01d138a35
-
splitter
|'|'|
Signatures
-
njRAT/Bladabindi
Widely used RAT written in .NET.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 37 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fc7f53497b9287e6f9c48e4d0e81520b_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\fc7f53497b9287e6f9c48e4d0e81520b_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4424,i,6510295916244954942,10164894160290787457,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:81⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
624KB
-
Filesize
48KB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
7.7MB
-
Filesize
40KB
-
Filesize
4KB
-
Filesize
7.7MB