Analysis
-
max time kernel
143s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19-08-2024 23:47
General
-
Target
ad1454bbcf1554b1954d39234c5515f9_JaffaCakes118.exe
-
Size
40KB
-
MD5
ad1454bbcf1554b1954d39234c5515f9
-
SHA1
0c598de5d8ca96bd54ceb71bf40926750ecad319
-
SHA256
a15ed621506b36adc0ca024a67785cc1fafaaf8ceb3afd6f20ba6adc810c4a4e
-
SHA512
406c5c76a64f2e9343b950d6f17f0bc59271d7b3fcda931fe1c5f309eab61fe2b754f8c4b7dba6e3a066e42f3fa729b02b7b3579e8f9533f1d8696135e2a2bb6
-
SSDEEP
384:1m/r3On/J15xVihvx5ZMaQah298aooX15Gs1m8eRWh5kNGXDEWynlM:1m/yn/J15xYhv7Z5FSduseWh5RzMlM
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ad1454bbcf1554b1954d39234c5515f9_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ad1454bbcf1554b1954d39234c5515f9_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx