Analysis
-
max time kernel
141s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
19/09/2024, 03:47
General
-
Target
ea87335eff3bdb10e228a6ee0585ad7d_JaffaCakes118.exe
-
Size
717KB
-
MD5
ea87335eff3bdb10e228a6ee0585ad7d
-
SHA1
72e2677dd1eb390ffc71365a705c478f9605230f
-
SHA256
339d7d55e98fbeb6f98b2182764879a19abf7962df5230ab9b9bcc5d37636cd1
-
SHA512
675fe9d0cdee01d4e41d05d3efa7f747904471d566a8d160fb1b1313f5d492fc7287ebd05b7bc479f3336b7dc303850808baa69b8b4e0ed1178fcbf1f1a648ae
-
SSDEEP
12288:axg/7GhAv71xJm4sQwNDq+n3ObvMdSNUwI8J89TD4BiS/VWMs2gucLBHpzLKExR:FqKlpsQw5D3Ob1IZO2MsnucLDzjR
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 6 IoCs
-
Suspicious use of SendNotifyMessage 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ea87335eff3bdb10e228a6ee0585ad7d_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ea87335eff3bdb10e228a6ee0585ad7d_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
1.1MB