Analysis
-
max time kernel
94s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
06-02-2025 04:33
General
-
Target
JaffaCakes118_a7522dc42b76f61883564549343933a5.exe
-
Size
226KB
-
MD5
a7522dc42b76f61883564549343933a5
-
SHA1
e88bfb65b7a1436670834958e2e034368ba1e499
-
SHA256
7fce756c9892c833c77140ca318cfdc5e53aac47f22e32e17a7355ac8b3c7a41
-
SHA512
1f42bbd6d59b6540fa0096aa83393264c8ee7c4492a971e06eb29166a6aa7397e35920f7ec55ea3f7a7f283637811922ddaf74d970858e111799e6df58ecde6b
-
SSDEEP
6144:UOy2YCh2Lsj520BIQzTpJw7GQwdKX5w+OGhLeUGC9UEBGMw:UOy2YUusU2JzTk7N/XWzGd5t
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_a7522dc42b76f61883564549343933a5.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_a7522dc42b76f61883564549343933a5.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
4KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB