Analysis
-
max time kernel
95s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
07-09-2024 05:02
General
-
Target
d1220a17a8f109d08eb8fdac6336bc2e_JaffaCakes118.exe
-
Size
1.2MB
-
MD5
d1220a17a8f109d08eb8fdac6336bc2e
-
SHA1
4e68d6a32be159828219052a912fc7a0abf4598a
-
SHA256
58bd396c9428a9523997eaa5ef2719af1c62ddf4387a6d0bf7eea01f47a53d15
-
SHA512
dba5bc126738f5777cf088ee4c3e898015897f9e16bbb3286d491e589acda86eaeb59cbeb0107158bb03beb681272aaa563e89b6a5d59fe51bfb82754eaee19c
-
SSDEEP
24576:KaZPugvorm5KIGG7yFO/qi/NXNfGCjSLmwsNPd3Rg5JBV1Ls2wBPU:tuWbyFO/jNd+CjS7sNlK5JBV1Ls2wB
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d1220a17a8f109d08eb8fdac6336bc2e_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\d1220a17a8f109d08eb8fdac6336bc2e_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam