Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
30-12-2024 22:11
General
-
Target
JaffaCakes118_aee8ae8846bfe53747977374997ca2b9a6dd05b80470c55c751adc5cc7f7582a.exe
-
Size
124KB
-
MD5
c61763d27855744ddacc747313a6e6b4
-
SHA1
6dfa1b8c3ff983c2312f232d35e92ce0b814a1f3
-
SHA256
aee8ae8846bfe53747977374997ca2b9a6dd05b80470c55c751adc5cc7f7582a
-
SHA512
279144754075140266bd6912fd3e56ed50adf1852ed5dd4f38fa59d034fc995df043b5e23659934475bbae862a1e3ef8c976db5d45af3d0dac385ed7dd039a90
-
SSDEEP
3072:mVh1qaSs6IF9OK4b80S2Van4Va1cpcQjed5OzqhUva:ih1qn3IF9Obbj/a1cpcQjeHOzqhUv
Score
10/10
Malware Config
Signatures
-
Remcos
Remcos is a closed-source remote control and surveillance software.
-
Remcos family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_aee8ae8846bfe53747977374997ca2b9a6dd05b80470c55c751adc5cc7f7582a.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_aee8ae8846bfe53747977374997ca2b9a6dd05b80470c55c751adc5cc7f7582a.exe"1⤵
- System Location Discovery: System Language Discovery