Analysis
-
max time kernel
140s -
max time network
122s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
09-10-2024 04:21
General
-
Target
2ab901eaf308d43895fbcb18a32a60b0_JaffaCakes118.exe
-
Size
284KB
-
MD5
2ab901eaf308d43895fbcb18a32a60b0
-
SHA1
4c77416831475e02284616300cce372c2bb52b93
-
SHA256
e83d77bc8516a2b79979e15193f29293f81ddede663babdffadda31b6816c378
-
SHA512
757bd972f89c6fdba4e6bda799e24754315438db6ab7c3680ac0fa11cd650eb3549790ab7b140c9e8d35d65fb3865c959a4c573fafe09c568a73d37bc73881a0
-
SSDEEP
6144:X2i/Q09K2HUruSzrV6GiEOO9xXiU6xi9m5JGniL9kF:X2itoL6GiEH9xXX6xiDiLCF
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
UPX packed file 4 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 2 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2ab901eaf308d43895fbcb18a32a60b0_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\2ab901eaf308d43895fbcb18a32a60b0_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
584KB
-
Filesize
4KB
-
Filesize
584KB
-
Filesize
4KB
-
Filesize
584KB
-
Filesize
584KB