Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
26-07-2024 17:02
General
-
Target
74ef79a1b72e3a42243db03e09768c89_JaffaCakes118.exe
-
Size
869KB
-
MD5
74ef79a1b72e3a42243db03e09768c89
-
SHA1
cdc69d960a99d3f21c3eebfde3f3290d51f8056d
-
SHA256
7fced7a1c4888cc3bdf9cdc1cc8a54e6c4a7165cb19312f1da761d4e3db69691
-
SHA512
a4a78b2fa48075a5058aea50279aa96542a5fefd94dfb6bdd04436e7f50a5b31a30bff4ffcb472a3881a993ca25b07594dec0580644d24d7cf0967c97810df92
-
SSDEEP
24576:p72x+OSa0eVkM8kTXBghG0dyMJttDMMMMMMi:p72hp0eVb5qh9dhMMMMMMi
Score
8/10
Malware Config
Signatures
-
Drops file in Drivers directory 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\74ef79a1b72e3a42243db03e09768c89_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\74ef79a1b72e3a42243db03e09768c89_JaffaCakes118.exe"1⤵
- Drops file in Drivers directory
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx