Analysis
-
max time kernel
138s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
17/08/2024, 22:33
General
-
Target
a4675c5f25c2abfbdd6d2dfb2a5d3d30_JaffaCakes118.exe
-
Size
112KB
-
MD5
a4675c5f25c2abfbdd6d2dfb2a5d3d30
-
SHA1
99118fdd66d767f77b73a98720c10d5245282a35
-
SHA256
6d3fd198bd3c2c62ea4c59f935ce81a5d03e134ccfe9f3c22fe458452ee3683e
-
SHA512
8d05610218dcc96331b87c34b9bf09ec8d7157e7166e1e049e9c0e9a68ff0abc65b7c670c7509b51e82b3c1fe30f9523dd95ebd4686622ce061a4d3d7a8516eb
-
SSDEEP
768:Iqp5owI9S76TlOkOlH/w/0QrG1S6z1dN1u4ixfaE3j+19CRj/7v+xS9MZtRhICb3:IeSwIzTlRO9wJG1SS1fM4ihp1Rjcyzs
Score
8/10
Malware Config
Signatures
-
Drops file in Drivers directory 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a4675c5f25c2abfbdd6d2dfb2a5d3d30_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\a4675c5f25c2abfbdd6d2dfb2a5d3d30_JaffaCakes118.exe"1⤵
- Drops file in Drivers directory
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx