Analysis
-
max time kernel
98s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
07/09/2024, 15:13
General
-
Target
d239c3d2909e31aa47af749968f479ef_JaffaCakes118.exe
-
Size
10KB
-
MD5
d239c3d2909e31aa47af749968f479ef
-
SHA1
6c40893d110601c8e2f53c1c0e5ee7c323984b46
-
SHA256
1703f2136a94f35aa5b7b0694f428a95a13e87421fbaa27808595241bdfd2ef0
-
SHA512
47896217c8364683f4533d1b4f08232692d1a18ac41b2f4974ed5149af5d98ab8d154a3c127409b50184536844c5aa4bb5dcd728be752a52e6c65bb3b2fba361
-
SSDEEP
192:OWoO1/F2cgxd6xw5vDQigMDNU1YNifsCeRBIFc9sCkGglcGaPK:Oh7xluHYCsCIBIF6sCrgyG9
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d239c3d2909e31aa47af749968f479ef_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\d239c3d2909e31aa47af749968f479ef_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx