Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
08-09-2024 03:17
General
-
Target
d3695cb9a7e17279dc7af5567d5edd30_JaffaCakes118.exe
-
Size
44KB
-
MD5
d3695cb9a7e17279dc7af5567d5edd30
-
SHA1
9baea72cef34a9bec22e17001201a48276444ac3
-
SHA256
98e851e19b90b0b34142ce921d2a6f6cea5f9bb522735f3947a7249acf2922e0
-
SHA512
aafd835012206354e51efb3d690eaf6d4c621ab4a35744b7cc33d98dc5e5cfe12f9d0acec88735f6243c87ebf12aa4439e96157eb1b2f2ae9ceb61cb7967686b
-
SSDEEP
768:hoNI1mYXVDlV85pTSkelXIqWoBP1t2a6aEAE9puSjgHZh:hoNIP8PyIqfBP10sZ
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d3695cb9a7e17279dc7af5567d5edd30_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\d3695cb9a7e17279dc7af5567d5edd30_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx