Analysis
-
max time kernel
141s -
max time network
131s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
14-10-2024 16:27
General
-
Target
431956032b2ec837fbd12b342ecd0795_JaffaCakes118.exe
-
Size
3.3MB
-
MD5
431956032b2ec837fbd12b342ecd0795
-
SHA1
01d4e925bb32c406d455972010f9d8af8b8e416b
-
SHA256
7a377a540a08b063061e856ab51ff4f66166a013c26f70beb75daf291bf3ed45
-
SHA512
797cb0559966737267c0a63344b610aa5f4b5dd486b4298cacbbf489e698f99842e0152dac678f3184cadf697dd47c8eb7271fd50877151b0699544c56566e18
-
SSDEEP
24576:fPN4kctKa10V6Q2lIjGVMKTt/ub3D6IYtVzpWYGI0EigKC4jGia2t85Ql/SzOxbR:HOks108lYGHC6TbigLI88bR
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Checks SCSI registry key(s) 3 TTPs 20 IoCs
SCSI information is often read in order to detect sandboxing environments.
-
Suspicious use of AdjustPrivilegeToken 15 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\431956032b2ec837fbd12b342ecd0795_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\431956032b2ec837fbd12b342ecd0795_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
9.8MB
-
Filesize
1.2MB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
1.2MB
-
Filesize
9.8MB