Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
04/10/2024, 02:49
General
-
Target
1185a0d736b2514a78c3e63dfbfbf2f8_JaffaCakes118.exe
-
Size
176KB
-
MD5
1185a0d736b2514a78c3e63dfbfbf2f8
-
SHA1
196cd495c65044deac1c010287247ea4d1339c3a
-
SHA256
b3d1d98220fa936cf0bc92f3c6afb81adc5672d9631a71ba1af16d2bccc5fd9d
-
SHA512
880ec020d80ac24261b8a380d7ab09acaccb7b4c32323f8b515371acaa201e6e5d566ce3a3898454026e7391e8a5844f07f15bd80dad5b07a0632a5b4479f980
-
SSDEEP
3072:4gXdZt9P6D3XJcMWErwwxOlfJSN1cKRbhH1dO/0XX/C+As6cW5wObll/56Ot2QX:4e34fxxO/SN1cK3/M0XX/C+36cW59/5R
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\1185a0d736b2514a78c3e63dfbfbf2f8_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\1185a0d736b2514a78c3e63dfbfbf2f8_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery