Analysis
-
max time kernel
99s -
max time network
18s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
21/08/2024, 15:19
General
-
Target
b3fb63e4c6b03bd1e15c5f5efd680dd8_JaffaCakes118.exe
-
Size
120KB
-
MD5
b3fb63e4c6b03bd1e15c5f5efd680dd8
-
SHA1
49ed6fa7701d72a1c35ab9000b375db8ea9e87db
-
SHA256
41bad92f2acf2c4eb90043039c501c9ad224625632e30a79e05dd4943a91ee62
-
SHA512
4da4ab216c16cf630a4011b2aed43fc375745a75dd5d8bc53ee555c24b8bec939577e36dcdbbea3c3651255a6a576c4d6ade182b3554579775f2f4e7cc141b26
-
SSDEEP
3072:9CXxLG0eIKu5EaBomawJi096+bocEXbVzo712g:qIlmd9BolZ019
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b3fb63e4c6b03bd1e15c5f5efd680dd8_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b3fb63e4c6b03bd1e15c5f5efd680dd8_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam