Analysis
-
max time kernel
131s -
max time network
122s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
22-08-2024 03:27
General
-
Target
b62c10e7486d448afdd8d157dbdb261a_JaffaCakes118.exe
-
Size
688KB
-
MD5
b62c10e7486d448afdd8d157dbdb261a
-
SHA1
d885809a426795643ff6deb816700e34810aa131
-
SHA256
0a37174a095f0c27ac36816fb91917752c108059d933f589ffd66d8914a072fe
-
SHA512
caad0743d4ec0f4a10791dfef2e5dd70c3fc5fc7d5e64a40c67dd36e2013982925fab0de85b2f947574b31acd5c64b56c1d8ee0af2b10a8b590d9c8040c76561
-
SSDEEP
12288:HSM5lPEdIUBPg3Nff/T83rKIUBP3SM5lPE:yM5lcc3Nfngb7M5lc
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Script User-Agent 2 IoCs
Uses user-agent string associated with script host/environment.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b62c10e7486d448afdd8d157dbdb261a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b62c10e7486d448afdd8d157dbdb261a_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx