Analysis
-
max time kernel
144s -
max time network
136s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
22/08/2024, 16:27
General
-
Target
b855d6391476aa7952eee3492fa34da5_JaffaCakes118.exe
-
Size
24KB
-
MD5
b855d6391476aa7952eee3492fa34da5
-
SHA1
1a8fed24d8211f92b86a68fa17fa7f115cf27cf5
-
SHA256
5c2e4c110b907e0966791a4d10e85c3a81560ab2c47d998a4237b1c75648cf92
-
SHA512
5c10ea509dd65ef894ec9e6a4a3b7ae1d79a777288fef31af91d5cc76e56a9eca6c2c9c643882b41c9857de7c7dba8c9189a9371056841423afb068f2891d04b
-
SSDEEP
192:/T67H+EC6TwQC34chwa+6XGjuwQx9s9s9g4VTW1DdQ7Vt4X:/T67HbXp45+WGj3QxaqHWDdQ74X
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b855d6391476aa7952eee3492fa34da5_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b855d6391476aa7952eee3492fa34da5_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx