Analysis
-
max time kernel
95s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
08/09/2024, 21:38
General
-
Target
d521385e42ac3780514bec2a3583ae62_JaffaCakes118.exe
-
Size
3.1MB
-
MD5
d521385e42ac3780514bec2a3583ae62
-
SHA1
9964302d40a1ed8e386f00578f534b896cd7b2a9
-
SHA256
9900a46bf84cdf523cdad85f44cdab4963fb804918bc6ddaed932586988c2e16
-
SHA512
32ff75f78aed63ae9d9f3d02da2692987b305aa827d48b20bf4cb59c0d3b46598c8907c569d4e7b0285cf4cb8a0a487cb2d63fd8ffb9995a95e7dd02299f7f83
-
SSDEEP
98304:6lP3D3gBw3JGAVmq9NbuLLnBQAay+ApOBo9/:6lP3D3gBe19bufBQFvApR9/
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\d521385e42ac3780514bec2a3583ae62_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\d521385e42ac3780514bec2a3583ae62_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery