Analysis
-
max time kernel
105s -
max time network
121s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
16/03/2025, 21:41
General
-
Target
JaffaCakes118_7bcec0a179c260480c9cebd476583c20.exe
-
Size
502KB
-
MD5
7bcec0a179c260480c9cebd476583c20
-
SHA1
9fea8914d8a4d30d722874f377722da94150ca28
-
SHA256
29fedf9867ed632b91360f0bdd8e04b5c52107960a6b0fef566a225e1204e72d
-
SHA512
3c5e87ea5638fa3fc61d932e640a6d8b5a357c1bf8d5076134b42b13b5397c577642fa024f61e9b4859401248042bb7ab2c866ec40520fb2c4a150c0b2ff16ab
-
SSDEEP
12288:vofp0v4lY68xJU9sQaHbwFWhj58dQ8+Bs0d:Y0vIds97Tvm+a0d
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_7bcec0a179c260480c9cebd476583c20.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_7bcec0a179c260480c9cebd476583c20.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
4KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
4KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
4KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB
-
Filesize
328KB