Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
23/07/2024, 23:02
General
-
Target
694e7f9ec7a2c47f547f2cb48513876d_JaffaCakes118.exe
-
Size
24KB
-
MD5
694e7f9ec7a2c47f547f2cb48513876d
-
SHA1
4b22e0ad31ed519f60c6251e90dfc02c4a218124
-
SHA256
4b2d2d75b6dc945f1435f99a6fb653390992e574afdf8280625ff22601708d94
-
SHA512
b6c5f737c4c848a859889adbc3b2a5bb69dc983ae00728b0cb75c874d2cc1e31d31ffa32a202d0a0ce4a9c8a2cea32381b1e3407d6246ef78fcefa32f02ae602
-
SSDEEP
192:URtt+ELGsDi8DHbpI3RZLt9FgEmaNjZoW3DwraB/9K:URttDD74mVaNj2W3Dwre/9K
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\694e7f9ec7a2c47f547f2cb48513876d_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\694e7f9ec7a2c47f547f2cb48513876d_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx