Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
24-08-2024 01:20
General
-
Target
bdbb7db9858fad4b6443d7115c1c0f66_JaffaCakes118.exe
-
Size
39KB
-
MD5
bdbb7db9858fad4b6443d7115c1c0f66
-
SHA1
9373c38a703b6bf673b44894ae871fea11b4dd2a
-
SHA256
d3e61cce2032ce54132a8c3f96da837593061ac901be343f54e7f37af6d801b8
-
SHA512
8274fb57f3c291f1e8dd922010c083f5ce1a3968d025d7e31c4553b5d622bc00c7c88a292641854e624d1a7b24a707504167576e4f9bfe3162e82e407303bc27
-
SSDEEP
768:9vdJOlEej4cNvJ4/acva8ibGxnfGGfcGffJdJONdKdvdJOb:9HZejJ34/acAGhuGkGV/2
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 2 IoCs
-
Drops file in System32 directory 4 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\bdbb7db9858fad4b6443d7115c1c0f66_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\bdbb7db9858fad4b6443d7115c1c0f66_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- Drops file in System32 directory
- System Location Discovery: System Language Discovery