Analysis
-
max time kernel
21s -
max time network
22s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
10/08/2024, 19:02
General
-
Target
87490e83cf98282f487dbb32d0de024a_JaffaCakes118.exe
-
Size
55KB
-
MD5
87490e83cf98282f487dbb32d0de024a
-
SHA1
acd3b6c109461336eeb5ee1e8978091dabbec045
-
SHA256
4645c966a354e736b508964f03bf9b0a4e4c1464c4fdc21c86d2bf23ec37de8b
-
SHA512
523bf5d1f42292f231c9a6defe42e1a985743f5e2ca3f49385f961eafeba95a3e9828c5eb2ca637a9da6392bdb97d3787e9570d8f9f4e03293ba8cb2ffe7d4f7
-
SSDEEP
768:zS6v1TyWT9rnK+w4sW9QWORctkvDt3xfz6Ktt2nVaix6H1/KT9CYUwqES9AV8zFt:u6EWZDKH4EbRb7TRonV0FKJCAqES9lz
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\87490e83cf98282f487dbb32d0de024a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\87490e83cf98282f487dbb32d0de024a_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
136KB
-
Filesize
136KB