Analysis
-
max time kernel
31s -
max time network
41s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
02-10-2024 01:26
Errors
Reason
Machine shutdown
General
-
Target
083f1e6d8d1320f1ca4b2638250b412a_JaffaCakes118.exe
-
Size
547KB
-
MD5
083f1e6d8d1320f1ca4b2638250b412a
-
SHA1
5ed0a49a975c5805d04349578575d01d57987ec7
-
SHA256
844691299632437254f028b26dd0d958b8dcf153a0bf224a4867300fbce6dcd9
-
SHA512
c6dd30e21c75bd3c9573e0efe38f90c60c2001d5a71e999c3705698b347c2dca99c33a44d171deb24373605c1ace14c1b38fc3d2117a86ad91a3297f43fc72e1
-
SSDEEP
12288:tuud0YcGL//JWM01Vfby4QQvRO4mqPeQ9HXD4AQf4CR5TqgnPLV:tue0YT/hmflRBmqPeQ93D4AQPN
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\083f1e6d8d1320f1ca4b2638250b412a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\083f1e6d8d1320f1ca4b2638250b412a_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow