Analysis
-
max time kernel
133s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
20-08-2024 00:20
General
-
Target
ad2e2ac62f90ba59c809797a89cf246e_JaffaCakes118.exe
-
Size
148KB
-
MD5
ad2e2ac62f90ba59c809797a89cf246e
-
SHA1
d164999aecf5a8c08857b4395582477f0610bd1b
-
SHA256
71579f4eb98c1a251baa0cecef146efd401e68a224952460c8911fb5a09ccc99
-
SHA512
676cd70200f55c40fd37a73cd1902186cfe1abc8e8c3e3c5d1625664548e0a0fd242c2842ebe7cf90a8c4fb81753d39c95161f78f866f32d507f325eac201085
-
SSDEEP
3072:y/pr26YWNDfdJN6goq9Dd2vD+o5eMGEEoI3LimuW:y/V2MlJsgoYdOD2vP
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies Internet Explorer settings 1 TTPs 5 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ad2e2ac62f90ba59c809797a89cf246e_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ad2e2ac62f90ba59c809797a89cf246e_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- Drops file in System32 directory
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx