Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
11/09/2024, 15:38 UTC
General
-
Target
daab7c96eeca4ffce2b4015ab8246454_JaffaCakes118.exe
-
Size
861KB
-
MD5
daab7c96eeca4ffce2b4015ab8246454
-
SHA1
eed65547e41b03d2ae6451ddf1de297f2c402619
-
SHA256
25eff2426796a6d3f03ccd48fc717fc0254cc915772c8f68fa447fa73af10c9c
-
SHA512
40322a276c5dead37243c18aded678b8754ca6aba4280e391a5c4725738effcfb201b806bac8f777ff1ad4a04cf204b1029f8b7c6770426fe85b5de65a2a4087
-
SSDEEP
24576:hRmJkcoQricOIQxiZY1iakDDDDDDDUMDDDDDDKXqu1LOekPE9xTy:OJZoQrbTFZY1iapT6u1LOXUxTy
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 3 IoCs
-
Suspicious use of SendNotifyMessage 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\daab7c96eeca4ffce2b4015ab8246454_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\daab7c96eeca4ffce2b4015ab8246454_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage