Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    26/07/2024, 11:46

General

  • Target

    73eb21f6be1358b220f4af01d7b434d8_JaffaCakes118.exe

  • Size

    68KB

  • MD5

    73eb21f6be1358b220f4af01d7b434d8

  • SHA1

    c3a7869b4c10863b2ba8dfc6d1283178a706f300

  • SHA256

    ae2b879b61c3d6ac8b0d0f91658aa2ef616fd2e58d92ddcce2309430d944eec5

  • SHA512

    79171151fc5f7d11b2381f154da4413d3b63a1d694841d662a8adcfe1c8bc4ba8debea01f19a5050b5f1e2b4d9fb11659ce6576edb5761db6bf0e47291ce2128

  • SSDEEP

    768:pv8CSFV1lUmKLi9GYIvV2DgVHXXQmDa/rvhjrMALYNjesY35KITJQeoxY+q9QK:eZFOLiwlvUSHXvDa/7IUzmK

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\73eb21f6be1358b220f4af01d7b434d8_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\73eb21f6be1358b220f4af01d7b434d8_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:2464

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads