Analysis
-
max time kernel
95s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19/09/2024, 03:17
General
-
Target
ea7c19b4875807ec8b8ad794270a95de_JaffaCakes118.exe
-
Size
635KB
-
MD5
ea7c19b4875807ec8b8ad794270a95de
-
SHA1
5a157b62e2c42b73a093e19c43fbe82407a3b104
-
SHA256
6d83209efbb17a8d4c029b539883716d4a73d26cf9b879c94a75f9c4d08cf26b
-
SHA512
c989626705e081e0985951659a5fee4f866438b3a998c68fe8b9902f6eba98d307251238afff6d1d20d5d4d9ba74bf05ecbd854290dd31e3d7aa11b16c835504
-
SSDEEP
12288:Bb8XfpFb6r7AoNqyo5D7JYq8ZD4obB2WDJsAumQPRISPhEpOE:B6pwr7AoNqyo5/JYqclbB2WDfumQPRBw
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ea7c19b4875807ec8b8ad794270a95de_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ea7c19b4875807ec8b8ad794270a95de_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx