Analysis
-
max time kernel
122s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
19/08/2024, 18:01
General
-
Target
ac04418e3df14f98b72cdde8266d6f58_JaffaCakes118.exe
-
Size
1.9MB
-
MD5
ac04418e3df14f98b72cdde8266d6f58
-
SHA1
69d34fca9697b849fec4f62bfaf1486de84a592c
-
SHA256
17362ed9e54eddb0a6707b0b8e35f595df583dcc39c54f482eb834c9afcdaac6
-
SHA512
4ebcf30ffa3b07723590aa6c264e6f0ef2f4b624ce12089c5faee76ef12ee945649430765b1f828c305073183752ecb84e59fed2a377a74c24671d8ba804f1fe
-
SSDEEP
49152:Utg2L4vj+MVbB0ccUvlPaxrxNP2iyaRhWM4NVIQKw/zpvKDVEZ:Utg2LQj+Mj0NxrxhyaANVgwoVEZ
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ac04418e3df14f98b72cdde8266d6f58_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ac04418e3df14f98b72cdde8266d6f58_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam