Analysis
-
max time kernel
141s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
04/10/2024, 05:53
General
-
Target
121a7ae373a74d30b1b073b392ff79be_JaffaCakes118.exe
-
Size
182KB
-
MD5
121a7ae373a74d30b1b073b392ff79be
-
SHA1
ba760537620548571f193cd2a7396ad946962a89
-
SHA256
0d450db163cc4ffff507d68b40cfb3d1cab428e928a74893126970ceae4056ae
-
SHA512
1b9bf7bca2415ce5680861476f5b886aa6ce29002366ce4e318175706b9fa95d0218c7de6dd05fe01001b66c5d54ed0f5385227300725f24a5ca5d804bd44203
-
SSDEEP
3072:mvstUKlvJ2+usOKDUcJaCcBBoKxiAga+4WvNc+xiz8TnYvclg6JFa9EGyLQEXmsb:m0tU7bsJ6RBoL4T18bPlLJFbLQI1LiLI
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\121a7ae373a74d30b1b073b392ff79be_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\121a7ae373a74d30b1b073b392ff79be_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
251KB
MD5a1bebaea757db992d76e8a5a85e4aabd
SHA12ceeeb96fcd6a71d3d0ea2c1d67b891a3abd4ffb
SHA25680e8d587f59e07b0b5936677c76bb194f048429321f5a57382198015b9f127ae
SHA5123b6727584b222031b8948a1c1ca480ed20d378d95ffdc351eac4e936516af4304200e162d2a3eec8e2ddb236829e08a2a3269655076530044d6294ae84fd16bb
-
Filesize
40KB
-
Filesize
408KB
-
Filesize
12KB
-
Filesize
272KB
-
Filesize
5.6MB
-
Filesize
7.7MB
-
Filesize
4KB
-
Filesize
7.7MB
-
Filesize
584KB
-
Filesize
7.7MB
-
Filesize
464KB
-
Filesize
7.7MB
-
Filesize
4KB
-
Filesize
7.7MB
-
Filesize
464KB