Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
18-08-2024 13:13
General
-
Target
a6cbc0e608c38eceb11b7a8bb315ab1c_JaffaCakes118.exe
-
Size
541KB
-
MD5
a6cbc0e608c38eceb11b7a8bb315ab1c
-
SHA1
d1653bc5b4f320a61fb3ef554daed956716045d8
-
SHA256
e482d749391d4092457e5f834773e7b717518c453dcb63e62b2e725b99ac47c8
-
SHA512
7fc8e50e514ac4b55ccd975f8ded7b27fd10373328b1063eeca7a0c770e9ad09bc440520f40f8b2cc5f3bf533816adaaf70026b80014b88096b530e895e64d5a
-
SSDEEP
12288:pslJkvH9Wz+1ZZeAQA8pEMEqkNjI7oo47GinZO5dYcfnFQdCwsWH:pwJGEaRY3wNjIv485tf4sWH
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\a6cbc0e608c38eceb11b7a8bb315ab1c_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\a6cbc0e608c38eceb11b7a8bb315ab1c_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery