Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
28-09-2024 11:15
General
-
Target
fc2f6c809cee90fecbeaf7f4d87014fd_JaffaCakes118.exe
-
Size
132KB
-
MD5
fc2f6c809cee90fecbeaf7f4d87014fd
-
SHA1
a4863efff9a78d08daa1aa3bbc7b2daa4ed4d11f
-
SHA256
1781482886fe79d624b89689b88d20815f2ad6ded9d511c91c79b0684ed698a7
-
SHA512
53eb582c3b772b8ac2bba05164881d2cbb7944bccde74317790d6b8cce6eb84b4f1ddbb72bb05377aa17b2ab4c6df4d3bfb6f3c8708dd1997d953bce9cc2afb6
-
SSDEEP
3072:vUq50RXpH/mI7CW5Z92o0bdFiQ6Gfh4oY56Uu:vUHeI7CWAFdt+u
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fc2f6c809cee90fecbeaf7f4d87014fd_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\fc2f6c809cee90fecbeaf7f4d87014fd_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses