Analysis
-
max time kernel
94s -
max time network
114s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
13/09/2024, 10:25
General
-
Target
de32aaf432de284bff740e0c5fe68b11_JaffaCakes118.exe
-
Size
701KB
-
MD5
de32aaf432de284bff740e0c5fe68b11
-
SHA1
d6c004bb9879e15f9cdc45a42e13ca75cad607dd
-
SHA256
a9fbf963c65484d0b40291070c30b02bebdc2ac3db7bb2aeb67fdbd38c8c85c2
-
SHA512
070b46a7afb255347a39ad332991d4d2fc53241659c3452a5eb9ec8fd49d980036c9e6327c6f7998c25140543f586d3dbebfdd73b23749ba10961e317e2a7588
-
SSDEEP
12288:Gaou4gq/IeCX1CL9NpJl3+CErW8H+Gz7fKuNz7RAPzbjDyOgYPUKP6ZNtpWFVxB3:Au4l/FCX1CL3ldZxuN5qbHyOgwUKP6Za
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Script User-Agent 1 IoCs
Uses user-agent string associated with script host/environment.
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\de32aaf432de284bff740e0c5fe68b11_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\de32aaf432de284bff740e0c5fe68b11_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB