Analysis
-
max time kernel
140s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
11-08-2024 08:12
General
-
Target
89a2e0e5bac25186ded14e38228c8fa6_JaffaCakes118.exe
-
Size
304KB
-
MD5
89a2e0e5bac25186ded14e38228c8fa6
-
SHA1
5eddaf6496907f7cb7ab24092a052bc18bbffe1c
-
SHA256
453f3f3f59626aad9d0f0652b9fb5b06c4817ee563771bf9bc5b6d1fbd4ce8e2
-
SHA512
e73a446a40843ed72967cbabd8c8752cbaf6e98a2d7f39540f151086bfc189ae9f875eec6a922146b4359b6ec621452cd8376706f814f3548ab2ebc0f2900c03
-
SSDEEP
3072:ppk8j+/QTl7vODGvJfNJePeP7LC037BZyirVecAW656SoHUfh7FEge74JvlTVEut:/j+EvWGvnPPCqlseVYW65I16Eu
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\89a2e0e5bac25186ded14e38228c8fa6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\89a2e0e5bac25186ded14e38228c8fa6_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx