Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
27/07/2024, 13:30
General
-
Target
78543f1b5e031b8ca1a5a8b15115d640_JaffaCakes118.exe
-
Size
688KB
-
MD5
78543f1b5e031b8ca1a5a8b15115d640
-
SHA1
a1d37031efe3dcbca94059a4233c50f7b2fddf58
-
SHA256
2f290016f2096035980e2ca40cc98351c7b692e59961ea44b5e9e07791162dd8
-
SHA512
477f18d24ffe33e8c30add500e710c718054e557490d44dfc451692c1c0e9107a225044157fb7f4b871ab551af2885d27451a42802d527fd874c8825cae0ebb1
-
SSDEEP
12288:7mW4KShPqF/BvTi+K6a9VEKQvZooPctlnBu5vMmNMXLnth:7YPqF/RTiP6arR5txo5vmL
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\78543f1b5e031b8ca1a5a8b15115d640_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\78543f1b5e031b8ca1a5a8b15115d640_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx