Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    25/07/2024, 17:58

General

  • Target

    70a640f3eed344ded28bde7f59dce6d2_JaffaCakes118.exe

  • Size

    16KB

  • MD5

    70a640f3eed344ded28bde7f59dce6d2

  • SHA1

    fea8b01518e21f3525ab1fcd498b75958e3c2d88

  • SHA256

    91d9cb87d4f339bffec14473259a03999cef7a66f6c68f6b5ac6f085fb717638

  • SHA512

    877ff0749038c8127ac4bf28d0937eddcdb5ea62dad070aa0a028e035542056e56d1cdf0006e198273908d7819abef24d4b4ce63cb692e3eee2dc3c618e57b41

  • SSDEEP

    96:/lxFfo66ca8ger5LC4Bb94qLW7CZFqWAchdek4XIqKgr2:/Tu6mrmhxblK7OFqWlhz44qxr

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\70a640f3eed344ded28bde7f59dce6d2_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\70a640f3eed344ded28bde7f59dce6d2_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:2536

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads