Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
30/09/2024, 06:38
General
-
Target
0001ba2d1ab27bdc1578c899e8ff8ada_JaffaCakes118.exe
-
Size
638KB
-
MD5
0001ba2d1ab27bdc1578c899e8ff8ada
-
SHA1
7be434a208ea00eba420adaeeeb70143fd2c6bbe
-
SHA256
31b200e8271b8bab143db73a180a7057f0262a35164cec2f6abde5da319f6dec
-
SHA512
f09d9db7900217b842ad5060056aeb3118b9322fd2eb39a214c3dbc701a1d69201dd223aac80d7ec08fa023e0ea893e4abf452d3127ee4a9d8588d4f9dd54ac6
-
SSDEEP
12288:TIyy51xtr7H4t3xpCBZkv+t1R/2/vQXLGGmcS+7mzZAM22nPxoNc+qLTwkun2JpX:Thy5/2Ru79XYHQXCu0A2JoNcRckm2HX
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0001ba2d1ab27bdc1578c899e8ff8ada_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0001ba2d1ab27bdc1578c899e8ff8ada_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam