Analysis
-
max time kernel
93s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
09/10/2024, 03:07
General
-
Target
29ba816002f8e41912430a99a686b277_JaffaCakes118.exe
-
Size
1.4MB
-
MD5
29ba816002f8e41912430a99a686b277
-
SHA1
ac77ccbd627b41fb57b5d590d8277aed0acca09d
-
SHA256
6797804a068d72423de8070d47a20dd7ec0d6621f710437b7aabd5d112c86e1a
-
SHA512
0a52d727d91036cbe007350cd40841c8782eadd4cd8a2bf817c37f96e0f87e2224b08a69e792c93b233054c490c0c8ad6dabd0680bb4c14d54f8d77537eb6cd1
-
SSDEEP
24576:V1u8jMc2W4X1WAP5GHy+1QwgsxWjDhCwz/aIGPHwLdN4ANkNKmxmfChyiMAEcgQk:/u8jL2WYP5GHyhwX8HhCwz/aIGvwnIKZ
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\29ba816002f8e41912430a99a686b277_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\29ba816002f8e41912430a99a686b277_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery