Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
23-08-2024 17:56
General
-
Target
b6f71b7e10541124eb12160649e981bd_JaffaCakes118.exe
-
Size
36KB
-
MD5
b6f71b7e10541124eb12160649e981bd
-
SHA1
62745993df56fc970cbaa3ce00158700000e898c
-
SHA256
9c39aa99591e5603a8237589e9b6a868ad4a92927c52026d243fbcdc2aac2def
-
SHA512
f200ee32b931432aae4bf3cdfc00dc1224fd397df55798a50e884a734999d7cf58d664440684d5620d547e5cb5f3729b618bed36205e309c5ea401ac843c2855
-
SSDEEP
384:RVRAUxVX4GCwqqUD+86aLvxtI8Kk7+5adj+v1SRpSS2Hm5J2:nRAUxVIGCNqLazv5iGatSR0P4k
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b6f71b7e10541124eb12160649e981bd_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b6f71b7e10541124eb12160649e981bd_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx