Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
04-10-2024 17:53
General
-
Target
145c5485b9cc79c31a8ee14a85984260_JaffaCakes118.exe
-
Size
355KB
-
MD5
145c5485b9cc79c31a8ee14a85984260
-
SHA1
6ef99c95d7147113f94306603f237e6266f7ada5
-
SHA256
c31868f661b21b449ab7b2e7ead04f6873c96d33de7d69d8242fcd8f3c82ba9a
-
SHA512
4726890e7e36f70592408a472602986e71695971baa3615a91c69568b80be0f3f70611504b4bd8f5a8cbb21ebc127bbb71d3240db82fcd10faa77c178f5bf316
-
SSDEEP
6144:EQg6R6F9j4z7WHf09RbMOs02+NfOV9ddrFm6UvjaEo+8NfWxU5F1nqSZK3LR:Jg6ZzS89qODdG9ddrILrCfWxwq3LR
Score
5/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\145c5485b9cc79c31a8ee14a85984260_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\145c5485b9cc79c31a8ee14a85984260_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
876KB
-
Filesize
4KB
-
Filesize
876KB
-
Filesize
4KB