Analysis
-
max time kernel
145s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
22/08/2024, 00:41
General
-
Target
b5af53b61e79fd778459db6dfa3091da_JaffaCakes118.exe
-
Size
148KB
-
MD5
b5af53b61e79fd778459db6dfa3091da
-
SHA1
20e45f3484ec04984cbfdde35edd978ec2af168a
-
SHA256
e85bfb34c0b47c8586214d528c4bc8f51adae6e5805d877a5a9c45f58e2b8574
-
SHA512
3516fe7ad2cb562887859e1915b2e4cfc8c8c1a0624710997791b8ea5d9315cd62914cc4b4ff28c3d093f5caac54e3470390ea66546eb2bd42b6ca6b024b760b
-
SSDEEP
1536:ilePHclKRF8lKbCSXTwmXE2J6PDMeKE2O7ZyQkykUclIgFwMKfv+u:isPHclKRFBXTVIDaERZy+AlIgCM
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 40 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b5af53b61e79fd778459db6dfa3091da_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b5af53b61e79fd778459db6dfa3091da_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx