Analysis
-
max time kernel
121s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
01/08/2024, 21:48
General
-
Target
81da443fc87c99bd3517a96cb26566bd_JaffaCakes118.exe
-
Size
650KB
-
MD5
81da443fc87c99bd3517a96cb26566bd
-
SHA1
f10a843a81f7275849ef207ea68d57dfb415fe17
-
SHA256
9084d4c50eb06cf490451be5cde410f968477d06af6fabe97de930f98fed0481
-
SHA512
b408883d821021e8c15dc721c81984a989a03619f84c89b882bff22d7a8a5cb62a329cac60a0d93f493e1a53e68fe8b104c6df30b8fc9fb8b24a3487ce7bfd63
-
SSDEEP
12288:w9XMPpCuMVlvBRlkCS7JYyGu5il6THBBZ26mHgUq8Mcc8bop+u:w9XcpsVlvBRlkCsJYyGuMibUJq8Mcc8s
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\81da443fc87c99bd3517a96cb26566bd_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\81da443fc87c99bd3517a96cb26566bd_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx