Analysis
-
max time kernel
142s -
max time network
135s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
24/08/2024, 23:11
General
-
Target
bf9f76964f508df3213b594b36ac76ec_JaffaCakes118.exe
-
Size
128KB
-
MD5
bf9f76964f508df3213b594b36ac76ec
-
SHA1
ff0f0a43ca31ef871e25f0740ae0ee60aeb8436d
-
SHA256
a0c0a81278dd412fdcc41dac9296776798e6e544bfec4174f24fec7c6202bc3f
-
SHA512
f4a055364d353418708c367c7753fa3d5a48081d667eb9e4e46adb95d3f77a462c29499afc4689131f3b28605ac17536551130a00ad908f725ccd9496726aa68
-
SSDEEP
1536:Ze10Y10p2IqA5b95qdSPEtbdTDgyfrOo7NVB0b1bsn4XV9A3yv1Ml3:yvk1l5bDO7hFcHb1wk1Ml
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bf9f76964f508df3213b594b36ac76ec_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\bf9f76964f508df3213b594b36ac76ec_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx