Analysis
-
max time kernel
135s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
15/09/2024, 06:50
General
-
Target
e1ecdd82d8779e07d731e39ac7ec49ed_JaffaCakes118.exe
-
Size
14.0MB
-
MD5
e1ecdd82d8779e07d731e39ac7ec49ed
-
SHA1
d29b48adb8ed1d5f8029d4d59db40e5f2be7b8d7
-
SHA256
ede95897f44dfb76ea879b2361af61dbf6ad43d82143e6cafaa62a19958be5b1
-
SHA512
0c16c76c913158fadab7c00cecefc8221708408d63d72ed71fd072b937282b53c29730b255025d5260c2d3784b8bde8bbb19e96521735bdc47e32da3eaa8a657
-
SSDEEP
393216:iIsiB26OPRrn2DYW0eiJNlI+M09/eOHoe:9dOPpj5z2y9W0
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e1ecdd82d8779e07d731e39ac7ec49ed_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\e1ecdd82d8779e07d731e39ac7ec49ed_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses