Analysis
-
max time kernel
93s -
max time network
102s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
12/09/2024, 21:38
General
-
Target
dd1865344e15de254ea9b118bee8961c_JaffaCakes118.exe
-
Size
4.4MB
-
MD5
dd1865344e15de254ea9b118bee8961c
-
SHA1
4663013f1816b411757180c83820bf0ad66e4d5f
-
SHA256
d430912aae4c39fc2eb6ccfa8f3c1492acec40b801c4fcd9a82943bc91c74a7d
-
SHA512
c82bb9e79155e35b3ec883c4c8e495555f5a8a941f5dcc8865ea44465b545a04b4c231d1ceeacbbd3a68de597a1cf71d23d0532743c8c26a2a67ab14767e2fd0
-
SSDEEP
24576:gzjiT7mLvvE7ThEzOtTAAjxHbQjrUI6U56G2ExtzSJBvbtyvw7vNBHU7h2MLl:gz+2Lk7yzOBxH8Pv56usBvEviBChpB
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\dd1865344e15de254ea9b118bee8961c_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\dd1865344e15de254ea9b118bee8961c_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx