Analysis
-
max time kernel
147s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
01/10/2024, 14:09
General
-
Target
06251905414e40b3558827457ed25d39_JaffaCakes118.exe
-
Size
493KB
-
MD5
06251905414e40b3558827457ed25d39
-
SHA1
e33b8115b6863e42b0aa8b732720fb986292f0f0
-
SHA256
7e94f7bd8ac08182391563fd6586dd46be2c8a9da69d1257ebb0dedf368db583
-
SHA512
569192e8ee46f9cda48f6b7a031dd6e6c3e3132e9cb9d7bcdfafc31f3bff4751d15e9d6c1124a2282bf2ff376b942ea5473b717d1735d8a12fcad2f1bb5f0c92
-
SSDEEP
12288:gZpAHRYI//Q1HYRy6xmHuaFtn1XLRLvoQoZRAWtKw/PMpsTFM:y+H2GxmPxL6QIr/PMpMM
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Adds Run key to start application 2 TTPs 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 37 IoCs
-
Suspicious use of SendNotifyMessage 37 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\06251905414e40b3558827457ed25d39_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\06251905414e40b3558827457ed25d39_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Adds Run key to start application
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5c9bcbed1d8884eb2b9b9aed0fa6567c6
SHA1ad18659bc6eddcf6e1e121f52fbdba31112cdb81
SHA25640ad696a8819cb3120983afac9c5ba01f0b3c3938f23ae4cc59d567691d5ca36
SHA5127f22e6d0e6da4a9a48f94874faf1190a7e651ec0c8e856084937414a9a848d001eb84b3d45beec5dc7a1ef7bb27036a315630f234613e269dbb016a017ddabc5
-
Filesize
1.3MB
-
Filesize
52KB
-
Filesize
4KB
-
Filesize
1.3MB
-
Filesize
4KB
-
Filesize
52KB