Analysis
-
max time kernel
95s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19/09/2024, 03:35
General
-
Target
ea82c73348d38b394750123a7538d0ae_JaffaCakes118.exe
-
Size
402KB
-
MD5
ea82c73348d38b394750123a7538d0ae
-
SHA1
ae73a487d34b903c3261ced3f48bfd1ec3a317ee
-
SHA256
367cfd4b8ef4ad1e82fb83d9e9a095c8f7d14502d6b2dd85eff55e31fbb94574
-
SHA512
9cf63889f8b3cff4ecab9e3059c64589af4a1c6f1172226e6e6a308c3cf42ccc7c1c58a78688be297e7a66ddf047d07c8befe46046c143e45dbcfde90feabf43
-
SSDEEP
12288:pUD2SF2mfmIqwF7USPpHDMgx5saJYud2lirTqZascBN6ORY:p3SF2mQ2pBx5kGWascBMiY
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ea82c73348d38b394750123a7538d0ae_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ea82c73348d38b394750123a7538d0ae_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery