Analysis
-
max time kernel
131s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
16-08-2024 20:29
General
-
Target
9fd187f3932c81656d255e528cbe41ca_JaffaCakes118.exe
-
Size
416KB
-
MD5
9fd187f3932c81656d255e528cbe41ca
-
SHA1
5eba11866de746e2e60dd803c22722ff70905df7
-
SHA256
658b5002529a1dfafda5fac37d00d79f9d1dadd8b6f206e68d8ddc8de7a39779
-
SHA512
06270ef28791626894584a67a3c44f2baf8f42371028e39d15807dd7402be3dd48ca5c57ec6825502a3312120546d6d3d1eea8b7a8d33d17d00ff8e58ce826a5
-
SSDEEP
6144:hI08XA9TqSxddp/vz15HbG9zuoC3hC5OFLPnm1KNJ9WXsi9RAVb3rolVdfhV:+0CAvdddx5Hy9zuvRBLPm1KUtRCifhV
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9fd187f3932c81656d255e528cbe41ca_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\9fd187f3932c81656d255e528cbe41ca_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx