Analysis
-
max time kernel
140s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
02-10-2024 08:19
General
-
Target
09bbea6a5f8ee12cbd3647ee74e2914a_JaffaCakes118.exe
-
Size
97KB
-
MD5
09bbea6a5f8ee12cbd3647ee74e2914a
-
SHA1
e6286aca0a7dbbdb507a66d55c19074049a1c197
-
SHA256
79afb5254ab3697e970cf6cdbd19e50993b593f4da60ff4fac5cc859ed4c2a69
-
SHA512
ca705ab0d8a01c23d4033acdd5125540b5a483a222bb2d6234b7becbfeb5630b9115c4307abbc1f6bae53fc63173ff50e3a6db30b147de3ae87a1e6372c3cbb3
-
SSDEEP
3072:BJ1MOZvcI05qw2g4JjSbfrQp1VZkNSu2oOOmt:T1MOZ+8g4JjSbryzZ87m
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\09bbea6a5f8ee12cbd3647ee74e2914a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\09bbea6a5f8ee12cbd3647ee74e2914a_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x378 0x37c1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
324KB
-
Filesize
8KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
8KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB
-
Filesize
324KB