Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
21-08-2024 19:07
General
-
Target
b4ac7f9a78f93563234c1b4ea24de1c3_JaffaCakes118.exe
-
Size
130KB
-
MD5
b4ac7f9a78f93563234c1b4ea24de1c3
-
SHA1
5d1817b9d4c72528e2af62cf7aa57fa2c0bf261c
-
SHA256
26b36d605cdf0147e0107338c0b95bb43359c8582111603c67c771cfa11e9711
-
SHA512
03a95e668d4172a2938115bc18e6bbd78965ac6f28ea0d223215bc3fcdab81615f6d7ca144b63af49e805b1aaf29350cc54f1a25a309767d587380bdc54a68b4
-
SSDEEP
3072:qcmVWD5ltbmP3Q7y5X7IrvVvpM4qEmiR8O8gv:hmJIzHM4qEfWO8gv
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\b4ac7f9a78f93563234c1b4ea24de1c3_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b4ac7f9a78f93563234c1b4ea24de1c3_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery