Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/07/2024, 12:47

General

  • Target

    6fa2b2d210aab15eda8a0a2a50d9be77_JaffaCakes118.exe

  • Size

    16KB

  • MD5

    6fa2b2d210aab15eda8a0a2a50d9be77

  • SHA1

    e742e7fc748f4da0c30d72fa69a1b89ba4411dc6

  • SHA256

    173b2255f265c1e33d00702301c8617db04a98f53dc5589a4f45977da3d95c87

  • SHA512

    6badc42f0507498eec5f60b78bf198b79c0339a75e4ea2122d41007ec12b53a79f44c69405c0cee3764819b8a0702abd0c36e6c46189963db48b93118af3a787

  • SSDEEP

    48:yOlxjsDNw4B+2f+x1FCzsbCPCvaJtrC8OKBFEjnYsw7E9:/lxjEu4pfnaC6vaJtrXFBQQE

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6fa2b2d210aab15eda8a0a2a50d9be77_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\6fa2b2d210aab15eda8a0a2a50d9be77_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:208

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads