Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
21/08/2024, 02:49
General
-
Target
b1d8bfd01eca0d23902cb2e8575f4f5f_JaffaCakes118.exe
-
Size
392KB
-
MD5
b1d8bfd01eca0d23902cb2e8575f4f5f
-
SHA1
f703f0bc8a1df4710ec93872a03e710430c1645a
-
SHA256
ea44332d826a0d62d1862920ee15a15d5e1bd4b839b3eafebbb63bbbffb14ce1
-
SHA512
1af1fdacea7870589af135f31379c65641a017d06833538c15ea64eac9dc019975a83ed3524a097996ecac60b81658585035b376251cc006cc0374ec9c117132
-
SSDEEP
6144:cgwceVCjNovLTsAZDWp5gjTMYY5BSn0Q+/KKHbvIMcn0QJ:cgwc2C6vLXQp5gjT1Y58n0rUn0
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b1d8bfd01eca0d23902cb2e8575f4f5f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b1d8bfd01eca0d23902cb2e8575f4f5f_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx