Analysis

  • max time kernel
    134s
  • max time network
    141s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/08/2024, 09:50

General

  • Target

    bb3db6be944a76e1198afc29b3161517_JaffaCakes118.exe

  • Size

    88KB

  • MD5

    bb3db6be944a76e1198afc29b3161517

  • SHA1

    5089f379c5a9dab28013b47d2c6b3567da13ea8d

  • SHA256

    d11590d1c834447d584f025e1fbc13c095e7cd7730d9f83b8cc711e525392f28

  • SHA512

    3597ad11b9bd34fd1eef4fcd0ec5584471370adc8adf67483519e240e303811d8ee6d599dfc3869eec4d6d2c89264ea3b0db4be12eebf0fe6827b1ea9f65b898

  • SSDEEP

    1536:v+l768laljn5i7KQEJe9sSTbWOFWPO/yKw5iElj8lUl76+:v+Q8wJno2le9skbWuWmPwoEJ8WQ+

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bb3db6be944a76e1198afc29b3161517_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\bb3db6be944a76e1198afc29b3161517_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:2032

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads