Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
25-08-2024 13:06
General
-
Target
c0cf0a5e040778a474ea78e850cb0876_JaffaCakes118.exe
-
Size
269KB
-
MD5
c0cf0a5e040778a474ea78e850cb0876
-
SHA1
85441c63050f9768232912079123e6a8b464c05c
-
SHA256
41a257697a885b0a672e9ad927c5ba25ef844c4adc5c2d814438b4ab86807874
-
SHA512
66741293d4967b4753e79f622615da27d6061847314f6d435cdebb7dd82c8ac2238d0b80b20ef5b8aa96588d7d0798e5a13024bbeef22c4759e1f60fdcacec81
-
SSDEEP
6144:W2co1sulog+z6WiX6LzVU4RTLAVV0w+Twn6izmBmNDo:UocgciKLDnMTFK
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c0cf0a5e040778a474ea78e850cb0876_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\c0cf0a5e040778a474ea78e850cb0876_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam