Analysis
-
max time kernel
135s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
21/08/2024, 01:37
General
-
Target
b1a81668be997e660b4682f062fc44b9_JaffaCakes118.exe
-
Size
156KB
-
MD5
b1a81668be997e660b4682f062fc44b9
-
SHA1
c1410553b0104cbc589f8e5d2704be787625998b
-
SHA256
c9be0dd9bd5ef981d1e30b9d097df585cd5a9f04f66b2afdde150372802e9ceb
-
SHA512
b8147c78c4c46692ca62270f327f17b7f50a262d6277b87f2f9a6d15fe656839a2199a5625c9bf59da111c1cf1d2e4f5271e321920eb8942ad3f151a6c1d56be
-
SSDEEP
3072:XdBdlV0FxQor6uW6j6Hz8rd+3QnCnQT4SbjcW:XPVCxQorM6j+zGd+3QngQ8s
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b1a81668be997e660b4682f062fc44b9_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b1a81668be997e660b4682f062fc44b9_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx