Analysis
-
max time kernel
132s -
max time network
122s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
20/08/2024, 12:56
General
-
Target
af5040f941162a5a7edd4528c55a60e7_JaffaCakes118.exe
-
Size
20KB
-
MD5
af5040f941162a5a7edd4528c55a60e7
-
SHA1
e5bf59b170a8c88b0eaa755e437630c2655b3ca7
-
SHA256
41361ae5d2f3b5f8d3abaa49077d3aa1f5a0c6baf94acf24971dce71c3762745
-
SHA512
5c846560dd6244869362ae17a01d3132f4060c8f6937380a9bc0d030240cfe33f639443ebf75720bcff5da81f2f809d26119031f96b1abcfc1678fc86942216d
-
SSDEEP
192:b1++co3W3gzDkWh2RRfs4RA+ESg0KkrmzrmnkjZLl:b12oG3gz7oHf7JPKkoikjdl
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\af5040f941162a5a7edd4528c55a60e7_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\af5040f941162a5a7edd4528c55a60e7_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx