Analysis

  • max time kernel
    31s
  • max time network
    38s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/08/2024, 08:18

Errors

Reason
Machine shutdown

General

  • Target

    a1cf7b3c1b95d7236af0c0eada70b746_JaffaCakes118.exe

  • Size

    24KB

  • MD5

    a1cf7b3c1b95d7236af0c0eada70b746

  • SHA1

    b8247613857594eec35b5659ef4ee221e27f25ae

  • SHA256

    1c7dc1a7b76e161550745b83932e81787447c5e3fba453331e55127b75ee8abb

  • SHA512

    4962f53e7cdb69a4a1b5235a33d95c63f7fbfa378553dc97f1356088a9da5620b03c2d86ec714aa57e6d4dc7dd06c27d1ee37e69e5e42eba84d02d145ce6c3d4

  • SSDEEP

    384:5EMJBeqdOs0P8f/RYx4BzR1iAsSnLVWHEN:TFOIf/RYqiALR

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a1cf7b3c1b95d7236af0c0eada70b746_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\a1cf7b3c1b95d7236af0c0eada70b746_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:3048

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads