Analysis
-
max time kernel
133s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
18/08/2024, 09:55
General
-
Target
a653dbd9480bacf6c679a7af96258842_JaffaCakes118.exe
-
Size
36KB
-
MD5
a653dbd9480bacf6c679a7af96258842
-
SHA1
2ddccfe5a49f1a9b1951bd5d5a3546dde213e3b0
-
SHA256
0efa08e409e3b11b36e92c148e5789fe580e75b63270733bb4eb8868191e5dd9
-
SHA512
a35805a1d159a48d3bb98903954a1646f691d5176921c37206e74ab312ebacb86a965baf3cda9cf9eb23873811b000d82cfb06599cec03194f11754855366224
-
SSDEEP
384:y+h7FOc78fXp0sYWLrqjm76e0DvXrlkkDzkxMvnd2No8ERwjJg1GM8y84C1SfxiF:y+yc78f7x+67y/lhh2No/0g38Z/ENYP
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a653dbd9480bacf6c679a7af96258842_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\a653dbd9480bacf6c679a7af96258842_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx