Analysis
-
max time kernel
143s -
max time network
110s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
09/08/2024, 23:01
General
-
Target
83e5fcf749885df9b2fe3b005e37b1a6_JaffaCakes118.exe
-
Size
759KB
-
MD5
83e5fcf749885df9b2fe3b005e37b1a6
-
SHA1
7aa52c0c559f96a420b914923fc60e04fccceef3
-
SHA256
410b65ab962daca22cbcbef4f3420b5c97c7dbecfe2c67985f23149515956170
-
SHA512
be91162646540b2b3fa0b541da33d42c87fe574fc11874be5e602077f98c6ac54d0201e44e547ec4359dd49a7b2e4c7ff54021a075ac59806db7ff0dfadbe3ec
-
SSDEEP
12288:YwaT4UN3K3vtg0fg4dJZrvwaSpgbHPYpq6tqD+7Wh+2Z9qMrAEdJLKR9xifGjBED:eT4Ul2zbwaSqHPYp/oS7WV9qhEdJo9xO
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\83e5fcf749885df9b2fe3b005e37b1a6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\83e5fcf749885df9b2fe3b005e37b1a6_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery