Analysis
-
max time kernel
16s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
12-10-2024 05:54
General
-
Target
38b662a1426c670519aa8914cfb688bc_JaffaCakes118.exe
-
Size
191KB
-
MD5
38b662a1426c670519aa8914cfb688bc
-
SHA1
8d14b1430c49c061273b9508f2b40d4b73435938
-
SHA256
53ff0933f8e0c65351edb09fd7544c4dc3df092ef901a6af821ee6ef30f411a5
-
SHA512
ca32d6c29ccf53ed0d7158344109f08e050c9951b81c91b4500a8293e9c80ff1eea88488b77f5c3246582be048f29f332db7a37a300429289b3daf7336062e78
-
SSDEEP
3072:5c83eFOFnoj50MuqNDRAt169zDiTRRNG2ALf3W//uCg/:KK80MZNqDazmJAzmn1g/
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 15 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\38b662a1426c670519aa8914cfb688bc_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\38b662a1426c670519aa8914cfb688bc_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB