Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
19-09-2024 04:55
General
-
Target
eaa0001fd6967420009949b20abd6c2e_JaffaCakes118.exe
-
Size
304KB
-
MD5
eaa0001fd6967420009949b20abd6c2e
-
SHA1
2b81e5e11a203f9d8e4a651a9f43073810438c71
-
SHA256
197474a89b8bcd9eff77816e19f2f75b38dafcca4edd0123ebd23b2e674e60f0
-
SHA512
f62336ac911dd275315504bfae75ddf7af0debaaaedbb046915cd569c80cf6f2759ebeea460e00a25e78f52e1f9c2b73449e69c391bb36a609bca4ab0086c844
-
SSDEEP
3072:jtF2LAnN/+z0nZPwXeD2alD6aVr1QoNZxABoBuCDqlyHyIkcOVYJvlTVIbj1zTI:jzwAN/S0n4alDdXJ7XuCDlZ/RIbJQ
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\eaa0001fd6967420009949b20abd6c2e_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\eaa0001fd6967420009949b20abd6c2e_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx