Analysis
-
max time kernel
140s -
max time network
142s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
03/10/2024, 16:31
General
-
Target
0fa18b65034d55c73a1df00431fa12d6_JaffaCakes118.exe
-
Size
646KB
-
MD5
0fa18b65034d55c73a1df00431fa12d6
-
SHA1
32e1ddcad95ea029d71c1548dfa986814a07ff0b
-
SHA256
72e5e85f65085a3ff4d78c268f8f25ac45efe16d92c9a097ad6721d25d6b7f77
-
SHA512
5a84966942e046a72de3ed5a66ad5e6c82ae00c8aa84dd9e5848b5acaa057ee60b456a4cdb47f5d7258075820bca773d8f6f7a6786868d9c00f42ad1a722c275
-
SSDEEP
12288:5THF3xzmU2MwYkpX2C+IY+3Wf/kevcJNEK2uYym+51zBjz/:5THbzmukpLF3ysEczB2uYz+5tBjz/
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
UPX packed file 4 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0fa18b65034d55c73a1df00431fa12d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0fa18b65034d55c73a1df00431fa12d6_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
796KB
-
Filesize
472KB
-
Filesize
796KB
-
Filesize
796KB
-
Filesize
472KB
-
Filesize
796KB
-
Filesize
796KB