Analysis
-
max time kernel
16s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
17/08/2024, 05:13
General
-
Target
a15102859e78f1a44e832dc41e67f1a6_JaffaCakes118.exe
-
Size
168KB
-
MD5
a15102859e78f1a44e832dc41e67f1a6
-
SHA1
5759c9326ddea8da697a546aa52ee6480ecaeaba
-
SHA256
f5cfce2de3282f3151c15b7a15dedfd9fe405acf46da3aeaead2921a6553645c
-
SHA512
b65fb23dc2aca237c701b6d0cae8bb9bc864508b82beb4f2e063293086cd3706852ce5e16db78793b4b89ce0247f3d3714631da4502d7ea4bf5352fa6e2cd63c
-
SSDEEP
3072:/3c1fP4AJJE0M6wIJvql5pJ5kAjniGMBUCZxICj4td4:fOPjQ0XqTaKixJZxI+4tK
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\a15102859e78f1a44e832dc41e67f1a6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\a15102859e78f1a44e832dc41e67f1a6_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery