Analysis
-
max time kernel
136s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
25/07/2024, 14:33
General
-
Target
6ffb626fec51c57dc96fc73d93cbf828_JaffaCakes118.exe
-
Size
20KB
-
MD5
6ffb626fec51c57dc96fc73d93cbf828
-
SHA1
88c825ea9ad00c3afce6ac11cb0066885057a090
-
SHA256
a4cd7a5dbceca54903959b4cd113eefb91bf2dd2a567a0768ec203b2ecaedcdb
-
SHA512
7c17c28270c19898d77be5bb0a1100c16a1de7eeb9ee083f99c8e5db80a6b76e14aa7e2414cf013b3b60d5caeb9d8cc495197ebfd80e15cd68b95e48f2e28f71
-
SSDEEP
192:ywl+EQZc3XBqS3A+5H6YHuRTvCtMoQ9IjuvJcPk:POmBbAX3TvCtS2jYeM
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6ffb626fec51c57dc96fc73d93cbf828_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\6ffb626fec51c57dc96fc73d93cbf828_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx