Analysis
-
max time kernel
93s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
24-11-2024 18:32
General
-
Target
9678eb57d57dcb7e25fd9ed8cc8aa38d_JaffaCakes118.exe
-
Size
550KB
-
MD5
9678eb57d57dcb7e25fd9ed8cc8aa38d
-
SHA1
b6a3ddf99a89570f081420608defe0a8b4fb28f6
-
SHA256
8144583e891884b7e48f7968a0ef249e6157a6eca6e31977d7a1015aa958c64e
-
SHA512
c662cf52d5ec9e0cb74baa653f335274288a1836387c466e3bd1930cd96110cf316d71438ffaabdeb5da66c93a069dd0e1c251d3f175be3c36a0fa066a7d98d1
-
SSDEEP
12288:VcEQ6UT9gVbiG9AuVjq0OlQjRkJcYbA3Sv0XmxJ:S56UB49Auh1OlyT2A3StJ
Score
7/10
Malware Config
Signatures
-
Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\9678eb57d57dcb7e25fd9ed8cc8aa38d_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\9678eb57d57dcb7e25fd9ed8cc8aa38d_JaffaCakes118.exe"1⤵
- Identifies Wine through registry keys
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
-
Filesize
1.8MB