Analysis
-
max time kernel
121s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
12-09-2024 12:33
General
-
Target
dc4b655a6a61fecd5a2d4adc3b3c43a1_JaffaCakes118.exe
-
Size
12KB
-
MD5
dc4b655a6a61fecd5a2d4adc3b3c43a1
-
SHA1
3a93410b57bbc8a3060dfdbe33db5eafc4f87ba1
-
SHA256
d85024b1b35e0195ae5ee4e8dbe83a6c56ed025115cd23f6b78b3b5e9db2e880
-
SHA512
2f10c248c90163dd58821599d471dff971f2ddb221d2e8dc2034f937e8f3778a137c5c5e6809cff06e0eb4e2a60ee14004d9ecaf758616bf56f5a9eb06738826
-
SSDEEP
48:ygN6T+26MySyp48dza2DazrsbCPjZrYg2yPZ8a9fFSHSe7vY/AcQbwntbK2:t4BySc+2nClrYnOJdSH7E3Ds2
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\dc4b655a6a61fecd5a2d4adc3b3c43a1_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\dc4b655a6a61fecd5a2d4adc3b3c43a1_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx