Analysis
-
max time kernel
101s -
max time network
18s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
14/09/2024, 14:39
General
-
Target
e064718ca1d75cb6c553c4570f593659_JaffaCakes118.exe
-
Size
1.0MB
-
MD5
e064718ca1d75cb6c553c4570f593659
-
SHA1
d07ec7eaec13aa6944cb19e4dd7928b679038414
-
SHA256
ff9a5b55da348ce50a36cda0fc8b6ccbd72c07e279c369b98bb3602c9d504573
-
SHA512
1047e60299124e399bc52404407b0f776d71a4c0f08747d96620eaede8fb50f1e95822d486b1307e8d7b01621b8d37cbbab860cde4b28aba09ab95b895353371
-
SSDEEP
24576:OHLmCiIhSioOXb1CD8fH2SWsWA4GMfFf9Gy6SsQeAV:D0XbsypkA4GeGy6hQT
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
NTFS ADS 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e064718ca1d75cb6c553c4570f593659_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\e064718ca1d75cb6c553c4570f593659_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- NTFS ADS
- Suspicious behavior: GetForegroundWindowSpam