Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
14-09-2024 15:08
General
-
Target
e07184b0289f94077794fbab0ecbc417_JaffaCakes118.exe
-
Size
629KB
-
MD5
e07184b0289f94077794fbab0ecbc417
-
SHA1
403af2ade1f5f7d4a08d5705af94ac7c4e45e7d4
-
SHA256
de3f78e470b39466b665aedfd531c6fb5a9d90784e4343b26983a31f6982f538
-
SHA512
7b0e308eda8a21e50242266d11d7426dc768d0ba384104902df5897a4026a74c95a0bedb03244e1e1aec879f612459b44d3e2b62cbd21be09fc1bd504f6e638b
-
SSDEEP
12288:3riHirsHTeReALcfk+O7JYwBrHVcp0qsl+TtGnIBlp1q:3rGirgeReALcfk+AJY8Rcp0qsqtGnI3q
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e07184b0289f94077794fbab0ecbc417_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\e07184b0289f94077794fbab0ecbc417_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx