Analysis
-
max time kernel
93s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
03/10/2024, 03:31
General
-
Target
0db61c0bf4cd7136655a647bd90ec16e_JaffaCakes118.exe
-
Size
773KB
-
MD5
0db61c0bf4cd7136655a647bd90ec16e
-
SHA1
bc569cead35a8bc05b8f79f624627cb49a400355
-
SHA256
e0760fa1610b46788f727d5812dfe52c3c0c84b55e0088663a0ffb28f588c3ec
-
SHA512
3ce74be3cc3582c1ebcd7e4c44cc379f8852dfab882c32bbac29339b74601225d8230f67bae0890d579a4ad65b3b9c776c0f8491fc2df6eae3a030af458e9047
-
SSDEEP
12288:Yuud2ih4ev4J54elubYj4/V0jnhxA6LX5eA563BNK6XE/8l5oAWahI3sV1E0dkO6:YueR4j6elZMVanreA5eKkvoAhQ813dd6
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0db61c0bf4cd7136655a647bd90ec16e_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0db61c0bf4cd7136655a647bd90ec16e_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow