Analysis
-
max time kernel
95s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
13/10/2024, 04:43
General
-
Target
3ddca0e603db7678489f039b59056413_JaffaCakes118.exe
-
Size
547KB
-
MD5
3ddca0e603db7678489f039b59056413
-
SHA1
c231e1fe4d7b3c04f452b8fac13d0230e4170aa1
-
SHA256
458948260729811d668791db1fffd865d736caaf99bca45c91d93bdcf31bacc6
-
SHA512
84bf0fb4e264cf0329cd54427e8786f6945844ed0fd2d0a2fe2c877e1883a6ddef604cb1cca258f3d63c3e9a77a819a5a945266b13e0fe9c1de2e1e5dade694a
-
SSDEEP
12288:0uud1YcGL//JWM01Vfby4QQvRO4mqPeQ9HXD4AQf4CR5TqCNN:0ue1YT/hmflRBmqPeQ93D4AQPr
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3ddca0e603db7678489f039b59056413_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3ddca0e603db7678489f039b59056413_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow