Analysis
-
max time kernel
14s -
max time network
18s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
20/08/2024, 17:18
General
-
Target
b020efd802e26751819c70c5c72dad11_JaffaCakes118.exe
-
Size
20KB
-
MD5
b020efd802e26751819c70c5c72dad11
-
SHA1
5bcf23017b15b5f6f1e2c9539e73a03bff8446eb
-
SHA256
4c74a8aad4e44cf16814baebdd2c9aafa9adb5c15b40176e89e307c354ef0f60
-
SHA512
f80fea98b3e01c584145860d6f9435aa4cdde650e4f3f77b2997ef3e7f0d7892ed0fd5ff4569360e3ec1438b8278faf34f656c4aedbeb0c659dd9305d381e159
-
SSDEEP
96:/lxBb2ZG01SagcxTbd6hXxocLtFGYK/+hT1D9SZlOckUYueOH/I2:/T84agcRp6hXx/Gj2hpD9SvI
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b020efd802e26751819c70c5c72dad11_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b020efd802e26751819c70c5c72dad11_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx