Analysis
-
max time kernel
142s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
23/07/2024, 15:36
General
-
Target
6829b0310e429d0f40dd534ebd8df68c_JaffaCakes118.exe
-
Size
112KB
-
MD5
6829b0310e429d0f40dd534ebd8df68c
-
SHA1
f2455700c03546a0eb8205a466ec70b517c0dc11
-
SHA256
bf0ec996e884ed6f2a9c27a3a92ffe00832cbfe595af0dfc9f1e7a553f438193
-
SHA512
b24206213be04eeaf0d02ad3c01be739537708fd1961bcb5b2943a27ac788fd26ea830699663979bfe9bb167e354829691cc8fbc4f1d7fd1aa3fdf2a04eaf932
-
SSDEEP
1536:pF9aL2Nc86GbIbPLsCF5CoQ/8Og+zEp5U51vbpjUg2UvOUZMmcqIe0xO:pF9aTAiDjF5CmOg++5U5BugZvOUZMm66
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6829b0310e429d0f40dd534ebd8df68c_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\6829b0310e429d0f40dd534ebd8df68c_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx