Analysis
-
max time kernel
100s -
max time network
109s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
06/09/2024, 20:02
General
-
Target
d05add432775a4f12c6be383dc38b7b7_JaffaCakes118.exe
-
Size
72KB
-
MD5
d05add432775a4f12c6be383dc38b7b7
-
SHA1
b4b4a19f4d544b1065558939d9ed520a1d0499ff
-
SHA256
871ad1497773dbb97bd8b4acefbe504ac702184cbb2f799a9a927118e789542f
-
SHA512
4a32063bd01a05c533795393352a56daf6cb8af6245decabc38a0c7775ff75577734b7f8ae6e20f4054072862d946b19155a51e065866c540882d79c99e512f8
-
SSDEEP
768:hEetxIm38cG14W2smFN6SrF5J/wBKps5jCiAzfLylyG3qXEoWTb4cQHvE:D8c42lpsNCXmyG3iEoWTb4cQHvE
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies registry class 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d05add432775a4f12c6be383dc38b7b7_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\d05add432775a4f12c6be383dc38b7b7_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of SetWindowsHookEx