Analysis

  • max time kernel
    16s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    08/09/2024, 13:35

General

  • Target

    d47b13aabb8c6f440353a74bdddd22ed_JaffaCakes118.exe

  • Size

    72KB

  • MD5

    d47b13aabb8c6f440353a74bdddd22ed

  • SHA1

    bcc140b70a9c12aa1be13fc81c94ff48ee6fa8c3

  • SHA256

    ab8d57d70840e57844b6172753e2c3c5283bdda1fa7f358f6250c923dc22c562

  • SHA512

    43c9db0b5e6957f4ed67e0dcc842d91243e3ef3de7480e5fe55eb17bd6709adc913d3e9b096eb58da55808c712e8acb34267beaf60dc055beba02a1a6a595c69

  • SSDEEP

    1536:MgdQFBdmWzMmuzMZb76zAuvjlj97E3FuJLrPvzvXTj3/3ErQj3NhOGl2FUEg7Bib:MgaFB4hmOMZb76zAuvjlj97E3FuJLr3F

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d47b13aabb8c6f440353a74bdddd22ed_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\d47b13aabb8c6f440353a74bdddd22ed_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:2528

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads