Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/08/2024, 04:48

General

  • Target

    8d60511dac319c4439ac0f63e380fe40_JaffaCakes118.exe

  • Size

    316KB

  • MD5

    8d60511dac319c4439ac0f63e380fe40

  • SHA1

    ea907a1b8f42d48b864ded3421295dc0a56500c3

  • SHA256

    9f950d236ed2f2d5ee9edcde9e0b8b98e3ecde9503646623846815b4245d55f4

  • SHA512

    cd03a368540e3865239acab61932ee846e8c4602efbd151f867125dd241957e1ad12a19c477a7bbdb00eb7c1e30aa6b1454a89ac15abfbfe5c248e2258d624e2

  • SSDEEP

    3072:wj2wXT5RCAvhHSzmqgVSXH6tdeYodCxywqy0VDADru56ztl5uYP+5J/I2PHegPyL:G5yzsVSwoCxy5yQGhF1eJAK+gKg2zhBD

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8d60511dac319c4439ac0f63e380fe40_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\8d60511dac319c4439ac0f63e380fe40_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:2800

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads