Analysis
-
max time kernel
144s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19-08-2024 00:37
General
-
Target
a8df2d27db22295e35042fe36fbf7128_JaffaCakes118.exe
-
Size
264KB
-
MD5
a8df2d27db22295e35042fe36fbf7128
-
SHA1
d12369cae44e5bb5993b9afc58e4d89d3e437697
-
SHA256
bfc823108ed70257525afd572639fed7a952ad8c42fb51f80007e32723096478
-
SHA512
4483716f41343c0874196444f3ddaa2b8ac488fb2102b124ba295d6045172c42e993c0e116a43dde26f961e3fb07b01b81423ca2b2b141b4f3c95278f5cc0f91
-
SSDEEP
6144:YirX+pd1bEz2s7ETRhEgFJz1tifJ2+pd1bEz2s7ETRhEg8:lX+pd167QhEQzG2+pd167QhE9
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a8df2d27db22295e35042fe36fbf7128_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\a8df2d27db22295e35042fe36fbf7128_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx