Analysis
-
max time kernel
141s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
02-10-2024 01:21
General
-
Target
083aabe5c6f11cf5f022de6d5bc6076d_JaffaCakes118.exe
-
Size
163KB
-
MD5
083aabe5c6f11cf5f022de6d5bc6076d
-
SHA1
8eaecf49bf5fa04169e9d4a94f8c111a3d807274
-
SHA256
7f0162d3b1e0d5f372c8cb260c5479b49ff6ef8f5c93cfd024c1ee4dd5714a4d
-
SHA512
980e70692e72d45e85652aee0330d2dffa5ae1083173b32c5097b9c1605292b7007e7f073bd5aa1da1c5da76e223438fd6635aaed3272c94ece15c979946397f
-
SSDEEP
3072:NH9Wre6TQMl8nN7P7A10ecvyhDYiphH5FR:WiaAD7DZahDYmz
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\083aabe5c6f11cf5f022de6d5bc6076d_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\083aabe5c6f11cf5f022de6d5bc6076d_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious behavior: RenamesItself
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
180KB
-
Filesize
4KB
-
Filesize
180KB