Analysis
-
max time kernel
96s -
max time network
102s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
06/09/2024, 00:58
General
-
Target
ce49df4276d3af71d371edfb267a792b_JaffaCakes118.exe
-
Size
4.3MB
-
MD5
ce49df4276d3af71d371edfb267a792b
-
SHA1
cc44765dd37d0f0171d8b6fc2c432ff71a5735a2
-
SHA256
10b1675d746ce4533d68d03b56f836dc9cfdd758ebac2dfb5a190e937642dfc6
-
SHA512
008d596b3a8620764578818934ec6249eda68e303db5760d98b8931ecf7d6495c153e98a1778bdb9523a8b3af565a9249022d7b3515b8bf4ead2ff285e023099
-
SSDEEP
98304:HV/utmXvhCfbPSYNX49ZJqfGRZJwSmeq9l/ITp:4tKMdCZ6GRZJjmT91y
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ce49df4276d3af71d371edfb267a792b_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ce49df4276d3af71d371edfb267a792b_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx