Analysis
-
max time kernel
95s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
03-12-2024 09:55
General
-
Target
bcd874515272d8710cf53e748ad15d3f_JaffaCakes118.exe
-
Size
531KB
-
MD5
bcd874515272d8710cf53e748ad15d3f
-
SHA1
fad2e3fce86bfb13740f68cf614fe9c79303ff68
-
SHA256
e97bc68195d88e5bf261a12619c869ec3708e33db7236d26c406f12037a4c024
-
SHA512
9ed56fe516f70b1d414b83e4b1e8bec2d5a59c9d87e6cd3ad2a74f6ae18f64683013c55f159f007c4372c2f4d9460ce6903a45bc4eed9a8c9bdfb7d3b1f80e2c
-
SSDEEP
12288:KvwHhePFcKICBvVrAEChDHUkariqZ4H9t5IJSXMw9/ZUR:lHh6xBabhD02caiJSZw
Score
7/10
Malware Config
Signatures
-
Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\bcd874515272d8710cf53e748ad15d3f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\bcd874515272d8710cf53e748ad15d3f_JaffaCakes118.exe"1⤵
- Identifies Wine through registry keys
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.9MB
-
Filesize
1.9MB