Analysis
-
max time kernel
93s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
08-09-2024 15:52
General
-
Target
d4b7af252c62062a63e235d4b6b3c9c0_JaffaCakes118.exe
-
Size
52KB
-
MD5
d4b7af252c62062a63e235d4b6b3c9c0
-
SHA1
3011944e83213c7bbedf4c36b0c92b221e537bbd
-
SHA256
fbd84ead494ce901d13ca80e5c2b8f11c2d9549bd5561d05c24e38020c1c3fb8
-
SHA512
787857d6eb8a6d2eb999a747199eed54fc691e4e2e80b8d09349c6766e7b2f5854ccd54a35b759e3ab2c152d729fdb42b2fe80e6e885a40a3f891df5532aa2b4
-
SSDEEP
768:VcGrL7w1+YnjMnocgO3m0qZB52iERsuYSyvY4euISEMB35:mGrY1+YgnoMbJYMiISEY35
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d4b7af252c62062a63e235d4b6b3c9c0_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\d4b7af252c62062a63e235d4b6b3c9c0_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx