Analysis
-
max time kernel
92s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
29/09/2024, 00:05
General
-
Target
fd69bd79e1c7483e9fc144bf6033f103_JaffaCakes118.exe
-
Size
1.6MB
-
MD5
fd69bd79e1c7483e9fc144bf6033f103
-
SHA1
496a3f7588ff5234eecfe9068165b591a40d5744
-
SHA256
3086a5ef19d37af29ef57b5a1c2cdac70ecbf6ebab25b023788bb5a62eb305cf
-
SHA512
d61a8118cca565597b236f3c9ed6b6a2c3895cbe1458d9670604c8b6bca55b3cbf544e2673c9a842cf3bd67dbd2ed313bd9cd550e8679d089a8628797cb99ce9
-
SSDEEP
24576:KUb2etJ1skgon27MN0lsol01HepAc/gBMfW:KIgoncPq1+pZ/g+f
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies Control Panel 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fd69bd79e1c7483e9fc144bf6033f103_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\fd69bd79e1c7483e9fc144bf6033f103_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Modifies Control Panel
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
-
Filesize
1.8MB