Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
19/08/2024, 11:34
General
-
Target
aad8fb6a85709bbd76d75605073fc855_JaffaCakes118.exe
-
Size
36KB
-
MD5
aad8fb6a85709bbd76d75605073fc855
-
SHA1
bbdeea261aead616b7597e43532ccd271d124441
-
SHA256
8e0cac5d0b2d173deb1d866bc1115649453a0bee3a1850cd42cbbb02f4af9007
-
SHA512
fc33fff9baf27145182bb4fe27d144c162e9f13f57e829ad835db187e9737666b752a4ab23e0b27d86c8ef95a58196b582886fe51f02bdf32031aacad87cb56b
-
SSDEEP
384:KefsmB1wDoRp+B5H2Z5GsBAn6HNeLNek+vDZA:KefpOIkWZ5GsBA6A
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\aad8fb6a85709bbd76d75605073fc855_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\aad8fb6a85709bbd76d75605073fc855_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx