Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    26/07/2024, 05:13

General

  • Target

    72b6fdc2ac463913e598110939191e54_JaffaCakes118.exe

  • Size

    96KB

  • MD5

    72b6fdc2ac463913e598110939191e54

  • SHA1

    ff8dee7fe30dfec2e0c31ed02da7e18264cc40cc

  • SHA256

    43fc9ea1e24d0d54438a90be3505c6df9417d97912c5b3a2fcb823cd1a8797ed

  • SHA512

    1367e19b83a5b841b6cf69595aa5b094df9361e2c15e067457afcf6923369ecd6e4404b2de7d23f54158e61bc1d5045539a7b4b5ba876f05589ee57892019070

  • SSDEEP

    1536:aCYGqXE+N1z25NSEtfhcXcA5BioI9iaVcibNVH9zg0:aZGqX1N1a5NntfhczI9jVcibNVH9p

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\72b6fdc2ac463913e598110939191e54_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\72b6fdc2ac463913e598110939191e54_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:1984

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads