Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
20-08-2024 12:20
General
-
Target
af30efbf5f0b267d65dcd210bd5a4136_JaffaCakes118.exe
-
Size
44KB
-
MD5
af30efbf5f0b267d65dcd210bd5a4136
-
SHA1
015b581d66cb0e978c8faef5548612cb89a00d3b
-
SHA256
c540bd7d6c3589600869c48351f0a63357d76516b531a506b187576c8a958de3
-
SHA512
de6a6f26dd643c93b09aa58ad7f0ff753f7042f099a96a4b66424aac3a970742c4eff21d76f5db88cef038e89c2d014185572ed3b20a5f0645f19d1508a4fa44
-
SSDEEP
384:oaVJAuCKwAP/VNlHuYxjZEhRkDHuJ9vR56LcVAvSiy4KFjBkcHADQmL7D30Sxp:RQu4AP/VHO4ehRkDHuJNWLtaA0jujxp
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\af30efbf5f0b267d65dcd210bd5a4136_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\af30efbf5f0b267d65dcd210bd5a4136_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx