Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
18-10-2024 21:03
General
-
Target
595e879f2f5308976c14ca6d23e9d173_JaffaCakes118.exe
-
Size
467KB
-
MD5
595e879f2f5308976c14ca6d23e9d173
-
SHA1
1be0fb7d07dcb00da5123a25721874154100416f
-
SHA256
b1ccad921a7d1776bc7ef0af12ff07da960522209344334ab365b7dc3380ed76
-
SHA512
035ecc9fdec38d5f7127cc5061b85096abfc0a40009eee670c55a3d72f1bb23d5431b5fc75d2ea958b1c1c6570361f0c5d72c1c9b98bbdf39628c00d4d46b76d
-
SSDEEP
12288:VFl7FigKdKResh+AKJoBGCK5HMPPXKFLvy/hRlFTWFZPH:NFiRc+AdBSH+PoK/hRl8H
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\595e879f2f5308976c14ca6d23e9d173_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\595e879f2f5308976c14ca6d23e9d173_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
4KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
4KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB