Analysis
-
max time kernel
134s -
max time network
107s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
23-07-2024 17:41
General
-
Target
6892e3f34a3b1881155a120e0f7c264c_JaffaCakes118.exe
-
Size
91KB
-
MD5
6892e3f34a3b1881155a120e0f7c264c
-
SHA1
bb0e461f7767776dc8858d97ee303cb1fe03a8ba
-
SHA256
190089bd4a23d741219723301f924fef94c3134bfed1f1e875b2d44e269c4b5f
-
SHA512
510c3c552b7ab1a62f394fdfbea57b9cbbe1fa471ef8a93c0c944dd99fd56f36883261e6ea04b86509e504cfd020cb783e7d5700e6ccbca8bc722cf7e738ba16
-
SSDEEP
1536:w5oX9ACOjrEzDTQKbKcNuPraAUd5o96F8k35W3aBGehj8H:3ACOjrEzDTDZNuTard5oXGc3aoeKH
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6892e3f34a3b1881155a120e0f7c264c_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\6892e3f34a3b1881155a120e0f7c264c_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx