Analysis
-
max time kernel
16s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
20/08/2024, 04:00
General
-
Target
adca4be642649d1456a03bf7cf4a7555_JaffaCakes118.exe
-
Size
1.3MB
-
MD5
adca4be642649d1456a03bf7cf4a7555
-
SHA1
fc93b83b8a7d4de96af62cfc13e8c1e917492737
-
SHA256
140614908401dde6355382ff320298559b978d8bdd7ef837a173eb38bee55a76
-
SHA512
1bc57f965954fd281dbb79313132453c91775e3040e94551e1b67309aadf72f6f99c3cb3d61b0c9f5d3e09ee1c1814ae84014b41b1147f4bbf45e600004c489f
-
SSDEEP
24576:wBpNec+Xn3Y6qoQWS9Yf8JhfEkX7eCIapT3DVbDHw3seo:doTgiUCIcTzhH/
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\adca4be642649d1456a03bf7cf4a7555_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\adca4be642649d1456a03bf7cf4a7555_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx