Analysis
-
max time kernel
96s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
13/09/2024, 08:06
General
-
Target
de04b932680c4885ac4860d4f4243bb8_JaffaCakes118.exe
-
Size
904KB
-
MD5
de04b932680c4885ac4860d4f4243bb8
-
SHA1
dc571cb1aa7ef475d09fd369a1465b8d96d538b3
-
SHA256
537a69beedf988b6fa8adb47e1ac5963d35c3f5ccdc3adc100334a729ef2a56e
-
SHA512
4748e24da68a0960fc9a348298a44a614a0650c6cf52877360dce68e69d79d609fc80d23884e5c1647c2f9ecba7f18f25706b0153e65f77aff8e0e056a916787
-
SSDEEP
6144:sxL02LptDCT7jQn5BLGSAGeNHV+dxPZo9/6YCrcJapfNL4UW4pHCceLGahyIX84i:2LT9ZCYBGFGeZ6oVbgtaN8CPLs
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\de04b932680c4885ac4860d4f4243bb8_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\de04b932680c4885ac4860d4f4243bb8_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx