Analysis
-
max time kernel
98s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
10/08/2024, 07:09
General
-
Target
8538ad81b3840bc8957bcdcb4a360f64_JaffaCakes118.exe
-
Size
2.2MB
-
MD5
8538ad81b3840bc8957bcdcb4a360f64
-
SHA1
46c0c4125ff452e35d8a4eb7fce8d20fc2f0556a
-
SHA256
dcadebe51ef3d1d0dbd36126dc91b2a870727143fee5bca7c3d82bf1483f4cef
-
SHA512
d6d1c78bd69629d27e22453dccc504c2c72fe946d3a2e6a8bb938fb067ddcec188a028ccb02d1454a58e478e8ad8765323de52f471a67112126cf80684162b5c
-
SSDEEP
49152:toAlsvzPsXoq6gktI1K9fFkwwWmbgdLl7MLY0SD/8PU7wvqYFGT+oNPhU:NCsXSI1K9fCw+b+Ll7MLY0LPU7wvqYg+
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8538ad81b3840bc8957bcdcb4a360f64_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\8538ad81b3840bc8957bcdcb4a360f64_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam