Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
20/08/2024, 00:00
General
-
Target
ad1e037934f1f614eeacdbf06677669c_JaffaCakes118.exe
-
Size
3.6MB
-
MD5
ad1e037934f1f614eeacdbf06677669c
-
SHA1
820a9aac51033f9ac9f921f8192b246151b3ad4a
-
SHA256
5f778792060deadb406a2a1b0fbdbeb0ba81a657addad01992e9a3a95047b491
-
SHA512
dfd14a3ecf4a1102020c0a718309d74dc1661abbbe32cb17b55852470b5eb1fb7a35760844ddd29d33ad330f316f838e05206b2a3ab19267fca932c3a75a7263
-
SSDEEP
98304:CRBWdb39YxpHiuQy3riv+1Ql9wwh2VKkig:C2V6nCdv+1Ql+zVKTg
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ad1e037934f1f614eeacdbf06677669c_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ad1e037934f1f614eeacdbf06677669c_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam