Analysis
-
max time kernel
135s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
11/08/2024, 06:39
General
-
Target
895f7238159d86e971798ea2ed7cd53c_JaffaCakes118.exe
-
Size
720KB
-
MD5
895f7238159d86e971798ea2ed7cd53c
-
SHA1
03bb58aaa5693ae5c940e4ee2f056f24a753acc6
-
SHA256
46aa84358a317983b7ee5aa77ef08f6c63b41e4954dbfc7a508fbf38c1560412
-
SHA512
5e86821d85b31d699384f1db3d4f8b913e8f0a8d558901aabc286055572a4933b23d5d0cad26aaadf36fb9459abaaf21f8af6114395f8f043fec750997333264
-
SSDEEP
3072:Th50xDuIcgV//U297BeCWeoDq2c4EcjyBpi7UWd2lpHOCnGwBB0ObzEge5lRcKXl:9GDl1yCj
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\895f7238159d86e971798ea2ed7cd53c_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\895f7238159d86e971798ea2ed7cd53c_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx