Analysis
-
max time kernel
144s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
22-08-2024 14:16
General
-
Target
b7f5a6f46267773711a2191a24372a2a_JaffaCakes118.exe
-
Size
584KB
-
MD5
b7f5a6f46267773711a2191a24372a2a
-
SHA1
6b83a6fd96c75dc4e34018643b950d5947708655
-
SHA256
788f2fe13722338b2282df5b6760d3d43200a066aafc3a2b5fa92b0d47b10776
-
SHA512
6c9f87dd7b86bd4fcc619bf144bdb01c1f6057074197b6e0cb2b89f7b30d172466e8fa60d2f286ab0711c322c300c5dae12134f2676a08c0d6b1c7586af15385
-
SSDEEP
12288:Vn9fM2VQUDg0nrb991Cv86VjBKti+z6q4:V9rCUDg6rbv1u86pBx+T4
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b7f5a6f46267773711a2191a24372a2a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b7f5a6f46267773711a2191a24372a2a_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx