Analysis
-
max time kernel
96s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
28/09/2024, 08:59
General
-
Target
fbf296c0a6fd6f0b536b4a6f8068ee39_JaffaCakes118.exe
-
Size
179KB
-
MD5
fbf296c0a6fd6f0b536b4a6f8068ee39
-
SHA1
1c169d674514c6e0dcfef3da1f884a15931d36b4
-
SHA256
4926f4e6201823cf25c0165411f2528dae1e730fa477d8c15b12dbc1751e9d34
-
SHA512
03be09ec406493717c9b1e26fe158ad38eef5bf807d179cff2622ac5c4c5cd3f3e24a94ef632c3cda4124445ee20f341436de1ac523f59888c53add959894f63
-
SSDEEP
3072:rOByJF8Uwy2zneJDEpiEIII1IIaVkbAGAdzB3Yt/nGQu4:dn8Ud2znaEgEIII1IIaVBGM3ZJ4
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fbf296c0a6fd6f0b536b4a6f8068ee39_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\fbf296c0a6fd6f0b536b4a6f8068ee39_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses