Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
12/10/2024, 03:34
General
-
Target
3841a6aa5821a96bd1baf37f789ef5d8_JaffaCakes118.exe
-
Size
291KB
-
MD5
3841a6aa5821a96bd1baf37f789ef5d8
-
SHA1
176044287d45293731484be8e2794cb7be8cfe98
-
SHA256
6a74de10fd2c4c2f2bed344a0a54c813ed73484c791f0784c6aa9b81a9d121a8
-
SHA512
12876e1b489c780751c02ad8bc9b638ab9b9def1a2b20e9fc7633d86c424305616ef070c10cced14f935381322e343f0dc4421e06506113677bcfb056c6f42b9
-
SSDEEP
3072:tTVn+n6ibD75+xWM4+4RZ19f9pzxwHw1JdLiUKn94cMwLB5AZKhu8v5hQ8NHJOix:heb/RZhwHUm4cmDkPnMju
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3841a6aa5821a96bd1baf37f789ef5d8_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3841a6aa5821a96bd1baf37f789ef5d8_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken