Analysis
-
max time kernel
94s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
14-08-2024 18:03
General
-
Target
971b5c149d062cc2197ebc027d47856a_JaffaCakes118.exe
-
Size
16KB
-
MD5
971b5c149d062cc2197ebc027d47856a
-
SHA1
fa9946b8d0f45ffdae63debda30adf6a53858f69
-
SHA256
e56e1ab0e12480a9d8df3c4aac21dfb6ad5077a69987a7af2d992ddf63f59796
-
SHA512
d907af2a1a0c4423681be0b7934e7ac66654dd86d22bed58826fb4bf003b47ef8bbd8437445ea714ff73cee40b6471183e0b926ab599f946d9b6f8ea141251ef
-
SSDEEP
96:e8CaRL5yQ2VOLha48LF/258zloNrLTCcy2:QSLkO9a4yjl4rby
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\971b5c149d062cc2197ebc027d47856a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\971b5c149d062cc2197ebc027d47856a_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx