Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
30/09/2024, 19:22
General
-
Target
02e98211322be9150dc8f9b22908ec41_JaffaCakes118.exe
-
Size
207KB
-
MD5
02e98211322be9150dc8f9b22908ec41
-
SHA1
378adf3db84a0de058e82f31b99de9d038819636
-
SHA256
53a89ec9ee32b794752aae3499ea2a4a915041235f7c5c780c851101091e72c2
-
SHA512
61feb7516fe9b478b83b5702eaa6d1f0b0dd9bb978ce967e45ab71ba212702dcc293765c3f355896a3908c7edd6f65152975aed5d4ac0a37b88dff18f6b19b8d
-
SSDEEP
3072:V5iZmev3A+V3g7xSaca8a8P4K1y36JiqQBrrGQevsNTL:CmeJmwa8a8P4KsKJinrVevsNP
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\02e98211322be9150dc8f9b22908ec41_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\02e98211322be9150dc8f9b22908ec41_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
228KB
-
Filesize
228KB