Analysis
-
max time kernel
120s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
23-07-2024 23:59
General
-
Target
697befc74abebfd35ecabdf6147a3a9d_JaffaCakes118.exe
-
Size
120KB
-
MD5
697befc74abebfd35ecabdf6147a3a9d
-
SHA1
51b71f8adee2222a38a8b21e33d203bd899b1826
-
SHA256
48769edcd28a594c0a21c9990e2f432c956af83a51574caa4376e148b2f58093
-
SHA512
888fd20973577d4c0be1605d2d8e839a0b9e9ea614ed92fc69d92737c5162ff1a43d349df79ddd03a6aee3558d36e01d8ecf0e16bbdec59914c29cde64a9d6c7
-
SSDEEP
1536:nco1BZYX8oKL3kS+HsEOa7iygfFeobAhNkwBoHjki:coneLok/7gfxbAhbaDb
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 8 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\697befc74abebfd35ecabdf6147a3a9d_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\697befc74abebfd35ecabdf6147a3a9d_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx