Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
21/08/2024, 09:51
General
-
Target
b2fff57249445df9f6ef4e152c55d755_JaffaCakes118.exe
-
Size
20KB
-
MD5
b2fff57249445df9f6ef4e152c55d755
-
SHA1
0a7cc84de1f613ae6b0fe493b0207c3d96a4f73a
-
SHA256
a158b8509174e740f88099aba5d743a46c45d8cb1ae27a7b979adb3e71d1422f
-
SHA512
874ab55bd755758c995a7162a0f27c350f0a4e2fb5ca8e0d555bdba58bc7cf7a38040ddb15bffdb246f385c9f462a5ed43a152d30bb3ca1d4afb0cce16b74e42
-
SSDEEP
192:att+ELGsDi8DHbpI3RZ0t9FgEmaNjZNFEb:attDD7LmVaNj7FEb
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b2fff57249445df9f6ef4e152c55d755_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b2fff57249445df9f6ef4e152c55d755_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx