Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
29/03/2025, 17:53
General
-
Target
JaffaCakes118_8f69ff8a4fdc7766009905e0715f35d4.exe
-
Size
76KB
-
MD5
8f69ff8a4fdc7766009905e0715f35d4
-
SHA1
e122914671b18b877abb23c62bd41dbd43a0335f
-
SHA256
180f971ca3f386856dad52ab39bcfc1b53dda04da3af24907bf1ca0522dfe157
-
SHA512
71e9bea1c49117971e8de15fc02e6b0335b677fd3d6a4a297f33c6e8cd6036ef249d68cb8fe6f4e9a72e136818853ac05f99acd51c6467efd00170048e7fdac2
-
SSDEEP
1536:Tz3HBexMQT+2umeWO2+FPx/lXYVAG8Zs7kfl/ig8O4:sxMQeXYVQsel/iw4
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_8f69ff8a4fdc7766009905e0715f35d4.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_8f69ff8a4fdc7766009905e0715f35d4.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx