Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
19-09-2024 06:59
General
-
Target
eace8a13ef050504eb3c07d2e079869c_JaffaCakes118.exe
-
Size
388KB
-
MD5
eace8a13ef050504eb3c07d2e079869c
-
SHA1
76ee9cd65b0b264da3ff7afb9fcbe215360206be
-
SHA256
432e993546c7968c3ec0203b58aa82a37fef7910a6f47110ad2f5602bdbc34c9
-
SHA512
7333c6d93a986c033a102729c1951dc15ea180bc1e5ac72f0077005f8b3a03c7eec5128119c46d4866cead9e00d9ba9824e71d52c4ce08be44911a3b25f6f9a4
-
SSDEEP
3072:MuhvEiZFkarIR3I1uRzd7y76YRohncDHL1rgQbdcBKTxd5udhiNofVkF:VEPR7ORUQxcBKTxd5udhiNoG
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\eace8a13ef050504eb3c07d2e079869c_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\eace8a13ef050504eb3c07d2e079869c_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx