Analysis
-
max time kernel
90s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
12/09/2024, 19:10
General
-
Target
dce0975e648896ff88be8b998e059e4f_JaffaCakes118.exe
-
Size
88KB
-
MD5
dce0975e648896ff88be8b998e059e4f
-
SHA1
c168a43fb20bbbbf1760aea1b6cd0fc5b029c93d
-
SHA256
c28dded47bb6f4cc56ef2ab7ba4e94c3afc4679a32b95c06c8a7c05947a2c4bf
-
SHA512
c194452f49db12f90322b55626c317e7cca11f5e582027b3a7b6a851762865a1c4283003e909c3f29b140e59935768766aa0650cd0b4f52efed90ff814f6e786
-
SSDEEP
1536:tekUuLpKQsVKroCdevtX7hxzHP8I0RoOrHIdp:teILpBsVtJvtXrn+oD
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\dce0975e648896ff88be8b998e059e4f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\dce0975e648896ff88be8b998e059e4f_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx