Analysis
-
max time kernel
120s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
17-10-2024 22:09
General
-
Target
53faff608f93f946a3af6ad6573a17d2_JaffaCakes118.exe
-
Size
773KB
-
MD5
53faff608f93f946a3af6ad6573a17d2
-
SHA1
7c0bc7a2cc5504cf6f0eac21b72c31a4654eec3d
-
SHA256
62c11eff6220f2cf778f022f4f4b409a83b7c56752b494b1ae636b2056a33685
-
SHA512
f631167dc34106446c1c487e3981d9e3b9b15cdc74b8e857ec9c667b8c2c1684feb2c81b9e36b9129a6ea275ba895ff30cb6575c4968a9a8f53e5c8612d36f1d
-
SSDEEP
12288:Quud2ih4ev4J54elubYj4/V0jnhxA6LX5eA563BNK6XE/8l5oAWahI3sV1E0dkOl:QueR4j6elZMVanreA5eKkvoAhQ813ddl
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\53faff608f93f946a3af6ad6573a17d2_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\53faff608f93f946a3af6ad6573a17d2_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB