Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
09/10/2024, 05:44
General
-
Target
2be82f5e12f544c597039dae5a2c0b98_JaffaCakes118.exe
-
Size
638KB
-
MD5
2be82f5e12f544c597039dae5a2c0b98
-
SHA1
85356f927b27d84a6ae6645c8b1e44d02b1bb1bf
-
SHA256
44ca94668a7ce6dddc85ecd540c16c1028320c7ea1929d08e2917c35d475445f
-
SHA512
db840502bce1ce1d3f8e27c873d00ac06b18c83c58ecc1bc144ee538b29c5fb6dccbef37179c024578512833c73b84dc99ec93f1fbe2b7a530e3808af57e612c
-
SSDEEP
12288:UuudhYcGL//JWM01Vfby4QQvRO4mqPeQ9HXD4AQfyjloMDPeu/CDxwL6Pf:UuehYT/hmflRBmqPeQ93D4AQKjOMDPFo
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2be82f5e12f544c597039dae5a2c0b98_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\2be82f5e12f544c597039dae5a2c0b98_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB