Analysis
-
max time kernel
94s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
14-09-2024 01:11
General
-
Target
df399ce680f7a0301b8e8b23764e9d3a_JaffaCakes118.exe
-
Size
13KB
-
MD5
df399ce680f7a0301b8e8b23764e9d3a
-
SHA1
70af87615d64de842fd629cc6edf72fb59072c36
-
SHA256
59e08dbdf5b468c8d5789e0dc7e7a33b364bb902a4ed3728f26cc17db722a111
-
SHA512
d2924387bf245709cb48a4d702245da3954a23220fd54cfb487c3162c13d190b1da86c93d5decdfbcfb4b91a039bab61a36b70ddab1e5293600e9eeaf631e454
-
SSDEEP
192:U/gaE3j6ojvWGuabRmmnwl4dMKqqGG28d+SKkd/wwU5xeRhO17KKaoFJfAap:U/E3jF5bAmnwlPG28ASTUeRgnRAY
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\df399ce680f7a0301b8e8b23764e9d3a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\df399ce680f7a0301b8e8b23764e9d3a_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx