Analysis
-
max time kernel
139s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
17/10/2024, 17:56
General
-
Target
52f33dd176a047d6229107e390e05f39_JaffaCakes118.exe
-
Size
731KB
-
MD5
52f33dd176a047d6229107e390e05f39
-
SHA1
2748a7870d0aa54a9bf0e45ee4893384e12b1aba
-
SHA256
66670c9f9fd3dcd5264f74ce55538f0453eb35b72a78e84493119c15bef3d4fe
-
SHA512
f587e0c293cd97f6b2953917f02afb54812e1ceef04661e5d88d29b6f3f8ff84eb14f94f22095c94b6774b43853fb972d5c241e4537462246ec966cd5266749c
-
SSDEEP
12288:Iuud4YcGL//JWM01Vfby4QQvRO4mqPeQ9HXD4AQf1Ym1eGu8+VK4jogDOFg:Iue4YT/hmflRBmqPeQ93D4AQhenlIIo+
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\52f33dd176a047d6229107e390e05f39_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\52f33dd176a047d6229107e390e05f39_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow