Analysis

  • max time kernel
    94s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-07-2024 15:56

General

  • Target

    683a34cef5761e720e31fd4d775ab176_JaffaCakes118.exe

  • Size

    32KB

  • MD5

    683a34cef5761e720e31fd4d775ab176

  • SHA1

    89ace756ef7960f7ed056cb7ba17536082a45a2c

  • SHA256

    b55b9b569b3bfc7678ddeb047d2d06d6fc2877fa635235dbae9c13f7e839109b

  • SHA512

    77c1a464e7b0e6e81e2366b3e7e213bee3873d643280c1e227fa1c5008e16f64c9cdf34d7ca8d967865c59704667c3bfd0fc7aec01b84285038264d725c80550

  • SSDEEP

    384:EPyQE1MVJnMRNusKxs9F9rcUySJouitCtTQS4Pn9M7E67TLm+DGSEP4ka:E6QxVJINdH9rrckXr4PE/B/k

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\683a34cef5761e720e31fd4d775ab176_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\683a34cef5761e720e31fd4d775ab176_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:4820

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads