Analysis
-
max time kernel
142s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
09/09/2024, 12:13
General
-
Target
d6494487afc5e99549050dad2bfdf7af_JaffaCakes118.exe
-
Size
634KB
-
MD5
d6494487afc5e99549050dad2bfdf7af
-
SHA1
023a47bf90169e0c901a4850af52185f3cbf7d2c
-
SHA256
d623e11d8302b5650a6057ab3d33612ec20210ca14d1076b62386d8b5cc2e9dd
-
SHA512
4a28610bdd7e905e4e18598017a2f806e67773f2cb2a17099bfdbed7db5305dcb7c13859aedecd8e35507cb62a8891344c37b46358d4fec01f8878d205220d2b
-
SSDEEP
12288:RgFSwg7hWWm8PS21w7JY8AMnRzOl4eGtAoziUTHA21LZp/a:RgNkhWWm8PS21uJY8AqzOl4eGriULt1y
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d6494487afc5e99549050dad2bfdf7af_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\d6494487afc5e99549050dad2bfdf7af_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx