Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
10-01-2025 03:54
General
-
Target
JaffaCakes118_da4285f95b17529b4f2b44e24c7d44f4.exe
-
Size
540KB
-
MD5
da4285f95b17529b4f2b44e24c7d44f4
-
SHA1
6148f4c07e5430e06a6aaa30f9b72415bdb3d123
-
SHA256
37b0dcffdbab2278525729831d1cdff7748605ec03e0419c56a6ef45705c98ac
-
SHA512
e31a5bb0de480822e641515b0b1aaa009777659ae841ed1fb2d0df969d9b78ac25cefe2804605d5061034c765ca3d646e57a40f76f6a5d115f9075735a9e191d
-
SSDEEP
12288:+/8GQc76pZB+OeO+OeNhBBhhBBYz2drJ/pqqFjGy27bENDquUxpVs8yEu:+/8GQc76pqJ11cbEVGbyEu
Score
10/10
Malware Config
Signatures
-
Modifies Windows Defender Real-time Protection settings 3 TTPs 4 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_da4285f95b17529b4f2b44e24c7d44f4.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_da4285f95b17529b4f2b44e24c7d44f4.exe"1⤵
- Modifies Windows Defender Real-time Protection settings
- System Location Discovery: System Language Discovery