Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
11-09-2024 08:59
General
-
Target
da01ebd0faaa7c2f4473f8e8f02b6b35_JaffaCakes118.exe
-
Size
304KB
-
MD5
da01ebd0faaa7c2f4473f8e8f02b6b35
-
SHA1
7d6e4ddf6c0e0e85c4bcb8d88c382b9a3bc0a1ac
-
SHA256
da40618a4322bf692f53a6eaf696743f9e31f06f99f023349006a82c81812092
-
SHA512
d3b83b14476736cce32ec811b19b8a29ad7b5b9c6b3afa88c61da7bbbdc6b0b68cb1b1764bff9bee593ff9865f29c139bb220842ca5dcf7a89b03c15fee9602f
-
SSDEEP
3072:iiphFzpGTovO+D6LfTaerPag1M0pXznaC7OUNatLoEen0HSv/7rYoU/74JvlTVIz:ResvXD65agM0jaaODtLon6ElI9
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\da01ebd0faaa7c2f4473f8e8f02b6b35_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\da01ebd0faaa7c2f4473f8e8f02b6b35_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx