Analysis
-
max time kernel
101s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
14-09-2024 09:42
General
-
Target
dfeedb703ef113f415b03a97419bf521_JaffaCakes118.exe
-
Size
32KB
-
MD5
dfeedb703ef113f415b03a97419bf521
-
SHA1
1f054fe8bd05826aa42d44f788212ea4b51ea91d
-
SHA256
81f84bfdce59584c33c45c35a93dc5ed16f4fb258539a374dcede3d8f7acb44d
-
SHA512
f764db443999384b79685f4dffa9c0bd51cbc3cc039b687a20e19dc5830a1d99f4234fbb8774a5cb032de95c817bb90cb8df4503f67f5218700f3c3c190fd076
-
SSDEEP
384:kbHHBcGQcz3v47NWTDTSFlZJ/bvmlQ/EKJVhW2Kf+eyMBkqwRhEtp+Flh0:kWGQczsNUDTC7NJVhiBy9hEtp+X6
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\dfeedb703ef113f415b03a97419bf521_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\dfeedb703ef113f415b03a97419bf521_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses