Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
19-08-2024 23:20
General
-
Target
acfebf7231cf3830844fb0124d907e70_JaffaCakes118.exe
-
Size
646KB
-
MD5
acfebf7231cf3830844fb0124d907e70
-
SHA1
70da3fc72016018b0febc15e4d9f034851117861
-
SHA256
e861df71c8bcf702d3c31eb19539c1ed0556882705d1c83bb1e17f1d3f6e23ea
-
SHA512
f4d722b8008b4fa881ca1a8c48e60c7d32d088ec23be587b49b0a7ff96cf5dcd8a5a717226b6ac7dfa632daa2f2ef601221a95d087e73eda095284c68b321a61
-
SSDEEP
12288:eXdh2Tl6shTzy1lbC7JY0IM6ax80s8kx4IEqsDSeUESn0pkO:eXf2h6sJzy1lb8JY0iaS0s8k6zqsDSet
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\acfebf7231cf3830844fb0124d907e70_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\acfebf7231cf3830844fb0124d907e70_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx