Analysis
-
max time kernel
93s -
max time network
135s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
29-11-2024 01:19
General
-
Target
ae27bb24ca891c4670d45ba023bc6c82_JaffaCakes118.exe
-
Size
4.9MB
-
MD5
ae27bb24ca891c4670d45ba023bc6c82
-
SHA1
53df6045ddb7319798a8cd5a4b85e2694b79ec9a
-
SHA256
82e7c0fb6d17c7c6ed69eea7060e9c2cbb341681799d1262efc0f31d8704cef3
-
SHA512
20f66c9414017913b484e6062d0b5639eef3ec87fa4cc11e21b76b9ee97f7ffc67207b7f6c4c90dd9ec8fb606fac513d9be3d18bf395b1fe0f737583691a9a09
-
SSDEEP
98304:d2cPK8rzPp4NE88c2TyHyb9Mg7d+WU+JpVntAo/HWVbuh2P8jNPMhHhFXXycZ5MI:8CKYEE88c2mHypMg7d+WU+ZntvYuhPpt
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 11 IoCs
-
Suspicious use of SendNotifyMessage 11 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ae27bb24ca891c4670d45ba023bc6c82_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ae27bb24ca891c4670d45ba023bc6c82_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage