Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
19-08-2024 19:32
General
-
Target
ac4928c5e79cbc10fd10e3d545945507_JaffaCakes118.exe
-
Size
48KB
-
MD5
ac4928c5e79cbc10fd10e3d545945507
-
SHA1
156b213acc40936a694796934610e60051631e7c
-
SHA256
ea23de13adc4a819bfc785014fee462c0c2741dd620bc64aae2fc4d529d536bb
-
SHA512
35ae6dfd71715ad63fd13ffe05c0f5ff7f0cb9ccc45aa831c71c35a857cf3f358a4954f4a3fab18302c80174d429d51508cb12ab72c5f3999ea58b2a29749ba1
-
SSDEEP
384:hOzA4oKDP9KDviKDS66VTKJHTdcrM+zi+iyoX+lDsAdHAKDJKDv5KDPP4:h03RVkBcKgOKsAlD
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ac4928c5e79cbc10fd10e3d545945507_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ac4928c5e79cbc10fd10e3d545945507_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx