Analysis

  • max time kernel
    120s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    21/08/2024, 17:12

General

  • Target

    b45173c14a8613c2947ba6112de729b1_JaffaCakes118.exe

  • Size

    24KB

  • MD5

    b45173c14a8613c2947ba6112de729b1

  • SHA1

    81df096824b765e55a4c4ed5a9283b4a403f1484

  • SHA256

    4eed26a76c49bfc6291a5557058390d04919b79c4f5f25b8d938efa33998d99f

  • SHA512

    b09dffb19abbcdf9381c0d42948afea52bde3c3655d357c9f8c0439ff480bf0f44f42b4699bf2e1521d7f396517a405801795d82ee9b1df09c9e6d14dd39d7c9

  • SSDEEP

    384:8LO2UyJlG7jA6XZX9aEPnlDHIcgqr1t4lbEB:8RUyJAvA6XZX97HtqbEB

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b45173c14a8613c2947ba6112de729b1_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\b45173c14a8613c2947ba6112de729b1_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:1464

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads