Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    26-07-2024 09:00

General

  • Target

    7364813c5569f953ff6f5fa3a90d63d3_JaffaCakes118.exe

  • Size

    24KB

  • MD5

    7364813c5569f953ff6f5fa3a90d63d3

  • SHA1

    7767df136d49cb5d9f95675e32f84fb89b51399c

  • SHA256

    e516e2bd0d2f31ab06ecb29572943b758cfecc081833f325e8541eb3712a1a20

  • SHA512

    62a79e011e0d7d82698b2c1f4090ca366eaf2ecfca936b2305be177db02a5534c782d9f63346b14f2a22c45eb2abb4ed5332b1e400a0595497346ed69d4d3720

  • SSDEEP

    192:BnD+Znzi1/LCqpSVDKh2T7Zf02cKYu+3J7uPFDdICstDQ/H57p+vE:BnSnQLCySV55TNC7uPFDd7stDQ/GvE

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7364813c5569f953ff6f5fa3a90d63d3_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\7364813c5569f953ff6f5fa3a90d63d3_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:1008

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads