Analysis
-
max time kernel
145s -
max time network
115s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
17-08-2024 15:48
General
-
Target
a3273bd8d003e6d6342c67e65bee9518_JaffaCakes118.exe
-
Size
340KB
-
MD5
a3273bd8d003e6d6342c67e65bee9518
-
SHA1
c6bc50e84c3f3b30f28e26858f7f20bb129e0f8a
-
SHA256
c992d44d0e3194d9e4bbe3e74b0e76ca16fcb9aeed0a879d5eba8b3f707e4022
-
SHA512
42abb9d962bc54fbb733b1e9893d8f83b0344240b7c81415bc4c10706652233aa92d487f603694824390ef56bcddd396f6bf1fa16aaa3aafecf8ac1f806c2e4a
-
SSDEEP
3072:rY/aKnuWDdGHNIUeGBCtD2X9a+9UeI8vIyl0+aatTBfaIs0I9:rBudGH2BjD0a+hBvIC0+aatTBCR0I9
Score
7/10
Malware Config
Signatures
-
Unexpected DNS network traffic destination 1 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 48 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a3273bd8d003e6d6342c67e65bee9518_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\a3273bd8d003e6d6342c67e65bee9518_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses