Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
26/07/2024, 15:19
General
-
Target
74991926b7466261ee23c1b33086e972_JaffaCakes118.exe
-
Size
631KB
-
MD5
74991926b7466261ee23c1b33086e972
-
SHA1
28a4404430978ac49053d5542a3ff18955476dec
-
SHA256
1850a54238595b0fb477337c0a18a5d8c280f3ba43a53bffeea8ecd8d4288583
-
SHA512
0ba08919e9165de57a42c5ee264060cbd3a2a30079567c1f2a3c58f06fbbc5dcfda82698aec99e65cd1b086e6027c1bb011dc04edead752599aeeaf8f78661c6
-
SSDEEP
12288:qNoFmw6FvnRuzg/axX7JY+eSUSuuFi4A547+8pVpDckHxYfp89:qNlw8vnRuzg/axLJY+cSJFi4ACy8pVpf
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\74991926b7466261ee23c1b33086e972_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\74991926b7466261ee23c1b33086e972_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx