Analysis
-
max time kernel
94s -
max time network
115s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
12-09-2024 19:32
General
-
Target
dce97527609111fa85dc124a4e8cf96b_JaffaCakes118.exe
-
Size
228KB
-
MD5
dce97527609111fa85dc124a4e8cf96b
-
SHA1
328b4e920a240bd0835a73ff7bc98998b569d656
-
SHA256
0fa1f3cdb7ffae636e64ea76bef7277fc596bf2e0682f07b8e99ae1cb799a525
-
SHA512
440629289e5089cf5e61eb05161d6513cb4a591692d7cb21f79c291dc48d7a8bf5acdad1b0ac3467dbb5858df239bb6b935903973b2dcc87fb80eb0b9fccedea
-
SSDEEP
3072:soPfmnYQfplzG32BH+D4AdS7BHbcCfG4eHIiQY1iQEqaiyO7SCPvcEWGLvbJzJIL:s0mFTfd8ChmFeCP5NfpKlm
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\dce97527609111fa85dc124a4e8cf96b_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\dce97527609111fa85dc124a4e8cf96b_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx