Analysis
-
max time kernel
12s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
10/08/2024, 14:51
General
-
Target
867e0df595f72661c9d8b45095262dfc_JaffaCakes118.exe
-
Size
800KB
-
MD5
867e0df595f72661c9d8b45095262dfc
-
SHA1
a9ec2b047ff2dfe77a2e46c97a2a7704479eaefa
-
SHA256
d47662e79660777a5b2ace269cd8f6538e58d5bd1c4691cdd2f975ca02742a54
-
SHA512
b0c77f8f5f9d8fa89644a5dfed896808de55fde195230209669424db289b37c55290627de66a31cbf2c2efc2d82218c096c87dcb7b3eccb655b5f513183ef33d
-
SSDEEP
12288:vd6cD/bBWJWEvQ5Gxj0rf6OkTqdXqraanxIszgx0:vdR/tWMEveGxj0rf6OPZQI2
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\867e0df595f72661c9d8b45095262dfc_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\867e0df595f72661c9d8b45095262dfc_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx