Analysis
-
max time kernel
150s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
03-11-2024 07:43
General
-
Target
8a582f6a81de74f166b0070e11e0ec1a_JaffaCakes118.exe
-
Size
1.5MB
-
MD5
8a582f6a81de74f166b0070e11e0ec1a
-
SHA1
780b99bc8362a39826a5834f1ff28a3c0c7357e7
-
SHA256
19c742eac1d75c5596c3daddace009214bb400bd0369eb934affa044159068f0
-
SHA512
f7bb8fc3507615f562258daf9caeb9e9f99e8645e8d1e9c5264b7d7f964866fc827a13e7f62248a6ca8c2c3f220c9a5512974238b68efbc292844006936b58c1
-
SSDEEP
24576:RkJz3kDERA/xwzKoC5A5mjkHh6knDU9YwCuXfZV4UMVAGTyusRMQCqb:2Jz3kT6zm5JjkB/KYwCu/4UMVAGTyusE
Malware Config
Signatures
-
Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Themida packer 2 IoCs
Detects Themida, an advanced Windows software protection system.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\8a582f6a81de74f166b0070e11e0ec1a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\8a582f6a81de74f166b0070e11e0ec1a_JaffaCakes118.exe"1⤵
- Identifies Wine through registry keys
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.3MB
-
Filesize
2.3MB