Analysis
-
max time kernel
144s -
max time network
147s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
25/06/2024, 04:43
General
-
Target
0c9912c5894fd6eac8ba77aba80b8387_JaffaCakes118.exe
-
Size
104KB
-
MD5
0c9912c5894fd6eac8ba77aba80b8387
-
SHA1
56e5c90946830965366fd9073711073867a25266
-
SHA256
a6c99abfc7102b251b0a89c3f54b28a4f5d908fde4d80e9aeccddf40157e30db
-
SHA512
f2bfeecff81b35666fd2b117669f54db93b5df3669d89ce1ee0ff8bbcf07802ca1f0c4e6962f5009bee5a83a2041a3dd2c12dd715843e30eca43bc8c3989ed40
-
SSDEEP
1536:8GEyNRaLHtmiijP0e21cJdQIkhVRI5fy9pf:8daRaLQrcSJkhVRI5ar
Score
4/10
Malware Config
Signatures
-
Drops file in Program Files directory 2 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0c9912c5894fd6eac8ba77aba80b8387_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0c9912c5894fd6eac8ba77aba80b8387_JaffaCakes118.exe"1⤵
- Drops file in Program Files directory
- Suspicious behavior: GetForegroundWindowSpam