Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
01/10/2024, 10:19
General
-
Target
056eb863098e07e47fa5e6bdffe3598f_JaffaCakes118.exe
-
Size
27KB
-
MD5
056eb863098e07e47fa5e6bdffe3598f
-
SHA1
64edf4e962a93abc64f064bcfc8b74790567853d
-
SHA256
793f4b318836a46faaa6b3eef4d77e2a0b494d22a3d344fcae9245e59912821b
-
SHA512
13c758a2482e8518c20cf1a674ee4e76e2625e939d318024aceb3aba8e126780285dd896afe433c18d844482517347b9b94a2a93995d32e651ac0f8285d07d37
-
SSDEEP
768:ZN0hzXk2FmUcot20jeDCdGEX5YtZXSdLfEiajD:Z+zXk2Fc9IGEX5iZXSdLTav
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\056eb863098e07e47fa5e6bdffe3598f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\056eb863098e07e47fa5e6bdffe3598f_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
96KB
-
Filesize
12KB
-
Filesize
96KB
-
Filesize
72KB
-
Filesize
96KB
-
Filesize
12KB
-
Filesize
72KB