Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
16-08-2024 21:56
General
-
Target
a016801456156ac10be551304943cda8_JaffaCakes118.exe
-
Size
304KB
-
MD5
a016801456156ac10be551304943cda8
-
SHA1
9ac4ff07e31a6e7f72a3b5b2766f6148688fafde
-
SHA256
5742ea74661722fc8b60097b08d826842449a25aafe59271478939b529fde0d5
-
SHA512
d3870fcb208a746551d422c10640497316dba623365e5dd08913d5e82131997a5080fff6134dd93bd94fc3e9af0b83af265e81861f23c3f9de9e40077efdd017
-
SSDEEP
3072:MgnwcagbhB7hBl+cbceaRbVktR2Db8qNZQlGQHacCTP/n5h1u1E9RZMxClmXw8o9:XagNB7hBb4bCH2HXOl3CTPPRQHo
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a016801456156ac10be551304943cda8_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\a016801456156ac10be551304943cda8_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx