Analysis
-
max time kernel
134s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
26/07/2024, 09:35
General
-
Target
737f62094fc515dab97c89c0bc9854b9_JaffaCakes118.exe
-
Size
60KB
-
MD5
737f62094fc515dab97c89c0bc9854b9
-
SHA1
012f04d107bfd262a2ad3ec44fb15e93ca7ad6d2
-
SHA256
a4b15893cfbfd11e5e6f5f9b6e248f81086a237659ef8cc1a15aa34e467f2941
-
SHA512
1b6b8c7753d7a4726c647628873e0025857d3378a70fd347da4b1a995df9a517d2a469cd2fde1e72ba99dfd7b78828dbcc01fae80a6313d6a4ff6f6ff7da5bcc
-
SSDEEP
768:ii9vkzgDEAH7FdAkJMP0TKCRFnToIf1CGEet6pBH+:F9vug3HTAkMkRFnToIfAac+
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\737f62094fc515dab97c89c0bc9854b9_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\737f62094fc515dab97c89c0bc9854b9_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx