Analysis
-
max time kernel
145s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
04/10/2024, 00:36
General
-
Target
111c82470d8a761a8b29536382b0b88a_JaffaCakes118.exe
-
Size
1.3MB
-
MD5
111c82470d8a761a8b29536382b0b88a
-
SHA1
9a339829202e7d8903dae9efbd483c6acd8f1b4a
-
SHA256
87ee941388da2ac843431f31bbed9586886468f737d46eb9e61b005620c41bb9
-
SHA512
d4ed67804c774425d099d8a502f7ed9d3b6cd237e99c5650733103720c151385724d54e8934cb3ae38a88b0505a9a2c98060e7ab026e1435a29be7627d597f41
-
SSDEEP
24576:Q1SOi3mjY3Z5JFs1qZhi8ABnSvjEnok3isIiiTMeFQFaa1tDsDNVm:Q1li85hSX3iiYWa1JsDNVm
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 30 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\111c82470d8a761a8b29536382b0b88a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\111c82470d8a761a8b29536382b0b88a_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: RenamesItself
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.4MB
-
Filesize
4KB
-
Filesize
1.4MB
-
Filesize
4KB