Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
19/09/2024, 03:07
General
-
Target
ea7890379c1e9f9c989ee5f5483ab1d0_JaffaCakes118.exe
-
Size
608KB
-
MD5
ea7890379c1e9f9c989ee5f5483ab1d0
-
SHA1
1fb355e0d1f04b8f41ad5ea4424db27fb8fc317d
-
SHA256
be274cd026aefa6ddf6a2a01f3ecdfecfc6bc9f06430dadd6102202abbdc2a67
-
SHA512
716c17a530429530f0b759d04e53b62abb7fb1b4bedaa1a697a7b222708a5e2c259ed5ff0fb47441b4bc74d80f0a590d1e89f2121de5afa799e34b43de25370d
-
SSDEEP
6144:OShQf/JRfyb0SiG2nbhuAVAoTWVjGbjRwfuvL4XLctQoX78Xy1aNpcj6MYlf3QEi:lhQ5YbOEAVAoaElEgKvXy10CjpvZ
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ea7890379c1e9f9c989ee5f5483ab1d0_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ea7890379c1e9f9c989ee5f5483ab1d0_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx