Analysis
-
max time kernel
142s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
23/07/2024, 15:06
General
-
Target
6811bcc4e6d834b7edb14e38c322de22_JaffaCakes118.exe
-
Size
308KB
-
MD5
6811bcc4e6d834b7edb14e38c322de22
-
SHA1
23b6783eb7b40871e2131428831ffc3b5aa8707d
-
SHA256
97140f95ed9d92dcb73b5545fd03b974477840d7433b7cb8721251852260b7d7
-
SHA512
8491cc62fc21fc2dc64cf8ca16769e8392599d184bdf50e5d6884e43b061c5579bf9e76f01827f61a3509c1a191e63f063194a51fb065ea41ff3380602c6ce9f
-
SSDEEP
3072:8I4odDm4QIdbKvd+XeY8u2Pb8viVIhjlRY2P/Y5LUh9b+23pfWr8MQlYH/j8JTl:3ZmUdbMu2PbX8jzdXS69bj8iOF
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6811bcc4e6d834b7edb14e38c322de22_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\6811bcc4e6d834b7edb14e38c322de22_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx