Analysis
-
max time kernel
94s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
25/08/2024, 16:07
General
-
Target
c11a0dba68a7c1fb0be45cf77ebadeb8_JaffaCakes118.exe
-
Size
44KB
-
MD5
c11a0dba68a7c1fb0be45cf77ebadeb8
-
SHA1
1c003187dd44f74e0cddfb436e9f77e2a9074119
-
SHA256
64f20729c54b15089a323b7cdb9e754f93fff4a697ad8d81cc7849e80124df23
-
SHA512
220ad3d2a8bf9718418ded145e9fc7b96ba150f33e61b61458e6ecdde7743fc2433a36ddc8c4e8d7b3e7c2b045737f4ff0bf64367f6755f15b68c491d992a051
-
SSDEEP
768:hoNI1mYXVDlVR5pTSkelXIqWoBP1t2a6aEAE9puSjgHZh:hoNIPRPyIqfBP10sZ
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c11a0dba68a7c1fb0be45cf77ebadeb8_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\c11a0dba68a7c1fb0be45cf77ebadeb8_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx