Analysis
-
max time kernel
93s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
04-01-2025 01:20
General
-
Target
JaffaCakes118_76c82b920c9b244afdc953ed38632510.exe
-
Size
550KB
-
MD5
76c82b920c9b244afdc953ed38632510
-
SHA1
f8c8ee86eb322ef561124fa9d91a3242e6c43955
-
SHA256
3bf6e00584f3eca4ff115798a3d0a50352b8896de50a6c93b3481ef528c478f0
-
SHA512
7ab71b61e1d0fe8c634bd5fa9ec0b721e1d57607fe1d708a1247cbf9cdda692183f6b17635cc81bd07a03c5b461fe1bb9185607acdd3f8cc1741992f56db5a82
-
SSDEEP
12288:d+shevF3ciBz+HCThlnv5To0uWbPawmHk0yLMGGjU:osh6FMg+HCThlnv5E0uWbPa7Hk0yMGGg
Score
10/10
Malware Config
Signatures
-
Njrat family
-
njRAT/Bladabindi
Widely used RAT written in .NET.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_76c82b920c9b244afdc953ed38632510.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_76c82b920c9b244afdc953ed38632510.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
576KB
-
Filesize
336KB
-
Filesize
7.7MB
-
Filesize
800KB
-
Filesize
624KB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
40KB
-
Filesize
344KB
-
Filesize
48KB
-
Filesize
4KB
-
Filesize
7.7MB