Analysis
-
max time kernel
90s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
30/09/2024, 15:59
General
-
Target
0228ffd67b05a27d8910eb82c96772b9_JaffaCakes118.exe
-
Size
164KB
-
MD5
0228ffd67b05a27d8910eb82c96772b9
-
SHA1
6d8a030806f4dfd45976cadb75ffacc412cddc6c
-
SHA256
110e7fca3bc26811b2ac14ea86fae3463d0e7404f766c7b3f46a83fd9a288770
-
SHA512
33e4eb84bd805cf47981c4d65930d97497212f1bbf316152cc766567c42051ed6c6838f16bd5b0f3a2d9346c9a6aae296479cab0b2bfbc52e432b50589f19f59
-
SSDEEP
768:Y40GcbPTZN1V0pa0KoJkyWR8+0TcQUPf00uDLwXhEFjIfRwSkKUnh8g9/7:T0GuPTdmp3kBgiqQXO4BkXfB
Score
7/10
Malware Config
Signatures
-
Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0228ffd67b05a27d8910eb82c96772b9_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0228ffd67b05a27d8910eb82c96772b9_JaffaCakes118.exe"1⤵
- Identifies Wine through registry keys
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
204KB
-
Filesize
200KB
-
Filesize
208KB
-
Filesize
200KB