Analysis
-
max time kernel
143s -
max time network
143s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
09/10/2024, 06:56
General
-
Target
2cd023dd5447cc17576378c726eea071_JaffaCakes118.exe
-
Size
583KB
-
MD5
2cd023dd5447cc17576378c726eea071
-
SHA1
4067022a528de7e825ab80ea7cac8e05872af3b9
-
SHA256
0aa6c6c32a874664c9ee65715b51c9bfebfbc98f946992040e20f0143c536c3b
-
SHA512
1dd62a8869e2fbec1a38ee733a5c37c7526e3b77694bb09d84c2d783427628ad9c2a51ec98ce61cfdbb5ca0395098d9dc642fdbd9a3ee84ec5b82fb66aa58077
-
SSDEEP
12288:RqMJfsGfwNVvuSn6VDScnOS8agaO9ggX+aM1lgjKSIjc:RqMJfsEwNMSn6VDSeO/jNOa+gD
Malware Config
Signatures
-
UPX packed file 50 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2cd023dd5447cc17576378c726eea071_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\2cd023dd5447cc17576378c726eea071_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
156B
MD51ea9e5b417811379e874ad4870d5c51a
SHA1a4bd01f828454f3619a815dbe5423b181ec4051c
SHA256f076773a6e3ae0f1cee3c69232779a1aaaf05202db472040c0c8ea4a70af173a
SHA512965c10d2aa5312602153338da873e8866d2782e0cf633befe5a552b770e08abf47a4d2e007cdef7010c212ebcb9fefea5610c41c7ed1553440eaeab7ddd72daa
-
Filesize
6KB
MD57ffb739887fba1335fd939fee4526278
SHA1ded5fd55fdb3666f6a004dc5cf3fe246ca330e31
SHA25602a4d655084818c0e87534dc5fe7b1a4fabbd6c1dc0fd9c19e6f572eaf5b8e3a
SHA512cfadcf604b5d8ead7370b7c4c1a99f694a956dff3e6a0608ea52c4079a9331476e8a2ea5640da90b6f046cc6dd240096f3e5e4b5276063e976e099b4ee98cc2c
-
Filesize
506B
MD55335f1c12201b5f7cf5f8b4f5692e3d1
SHA113807a10369f7ff9ab3f9aba18135bccb98bec2d
SHA256974cd89e64bdaa85bf36ed2a50af266d245d781a8139f5b45d7c55a0b0841dda
SHA5120d4e54d2ffe96ccf548097f7812e3608537b4dae9687816983fddfb73223c196159cc6a39fcdc000784c79b2ced878efbc7a5b5f6e057973bf25b128124510df
-
Filesize
3KB
MD59f1b8102368f6bfe64499eb84f2a7347
SHA1f61a0f9eaec3705cab50614c7e259954d0900655
SHA256ec725c8697f403da6126cff8b0956a8c3bc8812ccff1d7710ae6dbc296fb3ab0
SHA5123cbd8c2e82794f4dd1e3991319060e4b413757e85cf21caf4c9be57bc4cbc8a2ccb7317127573ea5044aec22872239393070526731b1d02eaad6dd2551a0c1b5
-
Filesize
240B
MD5ac391860a9ad32fdd295b46eb502501d
SHA1e07bf7c4fd4ca9d31d0f6f562cd723d2eb48ab54
SHA256d40022cdc0b9d44212378fc7d6de76a80b317433d1f655cbe0733abbb6dde35b
SHA5122d01948154bce9efa0a12570d935f786ca41a8cd20acbed1cf6cf13c08efcd74b6e93293c636396951592f69bdbbca063281fc316ad4cb64a893a6401f2fc97a
-
Filesize
294B
MD5aa5fc77754056e5cf059ae73ae3ffb93
SHA1d6dea0e225dc926506c9c1bc8d9084cbaf7cc350
SHA256cb4b816b428001c2756dc75791598a256ff2774c5dc9e87253ae77b5aaed8da0
SHA5121c61531ed01bd48af185450f64f6a908784a4846085044109cf18f385592f783ae6c9b99cffe95b4d6fc1108fc2cebdfeccca30a01c682f5d47b019429b0e8a6
-
Filesize
863B
MD5aebc9f7755027a8790663b5d74088c42
SHA1d567455a3e106cd5f456b1b0f395a0d0336aaa27
SHA256b3f34c560de55adc8c9eadef4a7779f2d2e6ee0997c340d8f10a8dda63c86696
SHA51253d4ce45e5c943c11d7951bc9f6563d3365ce36786ddc952bf6b3469b46a2c326410da29aff1061b21800b1cfff3088e3f3dfcad9f34a0962d069dd3a6fea3ee
-
Filesize
846B
MD5f6a0a0c082bc7ddc1e0e599493949e1f
SHA173b63bb6233e0e27b58ccdcb4ac32b05e36ce046
SHA256b01fb9069f905b1f8ec3b72937e1a7a415fa62ee289aa79c68f65eee43bdd762
SHA512ed5176bb258835a6346322a0ec0564557da28484a7bcc014ad1fcc337b14518b98e37475e41e6ae29cb724333e1c8471dd0f48bcf2a0d4cff522fb15e097716b
-
Filesize
1KB
MD5aa1424f218bf3befbcca3c4c0e42a365
SHA1c91d5dce4ebd543d905026577f8a05dff1d8357e
SHA256e1a823582add59d1406fd36d3f7f86f98873e3201168e542cb49239d6c525ab0
SHA5128ef2ea9613ff50bf028c9ef4611326d61b1cd07d01b89631faa2053449fab9a746e06e59a176dd5cda4f02f77fca8eedbb6e46ae4a78afa416ae8adb7ef0d93b
-
Filesize
1KB
MD561b27f16ef13d3ad95833dd3a932f307
SHA19e0866a07c8309b8f5fb3fbec98531f2ebfbce6f
SHA256be3dee9b5d9f2893607ff916b3c3313987a16092230650dbaeec6e9e36c63ad2
SHA512c3d6a15a826c990bd77c4d2581fe8791fb71346477ee360af50f96a7521e83f5ae89c520af221a737787684eb2b6a714afe9e6d770d9103de4fcc18f767283a0
-
Filesize
1KB
MD5a35aeb077ffa7ffb4382c639743d29cc
SHA1a00692b5a73c035da31aa5a285202cd117118290
SHA256dccfb478e6097086d886b5a01d120bf511b381982b0975e0c65eab3846e4234d
SHA5121bd9612dc93217f1341764d1a4f917da8af338649772a41ae89798b5db7cc9bd9c6ec78b7a34945d3d0885b929bf7ae696a865dd50e4fb332ff3ca77bd84d629
-
Filesize
10KB
MD557ca1a2085d82f0574e3ef740b9a5ead
SHA12974f4bf37231205a256f2648189a461e74869c0
SHA256476a7b1085cc64de1c0eb74a6776fa8385d57eb18774f199df83fc4d7bbcc24e
SHA5122d50b9095d06ffd15eeeccf0eb438026ca8d09ba57141fed87a60edd2384e2139320fb5539144a2f16de885c49b0919a93690974f32b73654debca01d9d7d55c
-
Filesize
577B
MD584b37cb510f50c8fea812eb308d3f03f
SHA1d141a79feb407506709f051e55c55438a12fd3b4
SHA2567bf800336671204de36b7d1f6ceffdff830040f51d21bc44f220f68d72cf492b
SHA5123222cb5772a4e9b20de253914c0856c7e6383567df68fcf287801f6f79248f65957515e7ec4a44db1fbe910afeae8ca3349295c4bdf03df6aabde36f2aaa6b5e
-
Filesize
104B
MD535a600a752d3074501de31a516860499
SHA151eac62cf77a0b88a3e9cb9ee6f85def21fd4bcf
SHA25614e064857751b23da7bbe40861ef4caf99b2496227507b8e3108fbac6d901f75
SHA512046ec179571d239bfb2d51be9837f96d9afebf2e5db77bba0f4a25ce8716d37581a3f9753bd2dbb04c47711699a9d93987bceb71df0b8becf8c577d660320069
-
Filesize
812B
MD5eabb61abba55f80af418fa1128d1548d
SHA1a5ee1d55de2cc60966039120c830fc19cefb0351
SHA256717f3f02f5d5fd1478b6d2ec44acef6e70bb8f1adcf2dc030c08b92e851737e1
SHA512d232072c9540bf0e2fd56f353c2cc83518eabf8282cc02d9f8bec81c0341287ada29ba79f2a515d68722658686b6cce97be138a48f44409562d9a567af200bd6
-
Filesize
221B
MD507cd59b954e8495ad6cd6a7c11d2de86
SHA1787aeda3eee8053705fb208a6b399b8340820b82
SHA2566e6b964fd79b4a3461f128e2ed145b9b641d108b8616695f36387661cae995bb
SHA5120159aca0c2a49393fd91acd4b6819217e67f8fd01e220297eb3e0fdd8132fad794fc317f5cc5e2b761d4123da71478b97df776908de6740eb6d54187c6c00754
-
Filesize
718B
MD59d31583bcfad58a6b9ddeaf44549a5e6
SHA198f4c693af708e02201de2aee31fe094dc3b0a9c
SHA256e466a2db2f755d9eb68619439af37ff4e45559b7a3f476e226ab2a11aeadae1a
SHA5129ddaaad53375f4d2874fe5c98b6782202d2bd975cdd9363796986dc7567368b94d9ec1aa3e839194097838b787bbd71d574540cf5b04fd04f10fa80d6a89e695
-
Filesize
3KB
MD544a6fd92e6da7a8163eba411a9a2e2f7
SHA1c622874293308006de10337dc4852972f9478539
SHA2564d92d24584e64d0c6af338f14b490e20b0c14996f314fd11df5b7e74ddd45f17
SHA5125be1ae2ae9f35b0b7847e3199c669ceb3589d6204009fc45afad2a55b43eb03c9d05d0c09913c38eea9da2046dd1d92f3ae298a50aa77eeaa3efcb76a5fb3c29
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
88KB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
36KB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
