Analysis
-
max time kernel
94s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19-09-2024 17:24
General
-
Target
ebd5cdcdd587f4695c76f4ef8c5fc0a2_JaffaCakes118.exe
-
Size
244KB
-
MD5
ebd5cdcdd587f4695c76f4ef8c5fc0a2
-
SHA1
f71fed86b2f32e6a53167f8406b5f8ab758ed1b5
-
SHA256
72f867b279ac5726f1abeee22880228bf12636c5c667ce75a57a80eac668f27c
-
SHA512
5d4c9586a29d291e5f3eef00ddd2c590d1627b49ff46d4e615f06412f82e2d394415edf15f3ad77a1d2ba4108bc290cd20bcb555db64e4f42c06518f72f7fdf8
-
SSDEEP
3072:bONedz+010NyyN++k1ButZviNgsTsxCtsp4BS/5rWJSt/6BlITpK:0Gy010NVN+LQ2bTsxqhB6wNBl7
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ebd5cdcdd587f4695c76f4ef8c5fc0a2_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ebd5cdcdd587f4695c76f4ef8c5fc0a2_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx