Analysis

  • max time kernel
    94s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-09-2024 07:05

General

  • Target

    ead0cad8e5551995411e595fc89018d4_JaffaCakes118.exe

  • Size

    80KB

  • MD5

    ead0cad8e5551995411e595fc89018d4

  • SHA1

    6f32888b8439ef88b082e48b93a725290f584a9f

  • SHA256

    e1aa4bdc2b86131d93891ad3e7d87253b4b4dbd42b52afa73055fa3f753493fd

  • SHA512

    a021178866c500dc56f6767231b88e6430d42aea5637320b23a651f7de4a8f937871bb21c0cf499427932fa9fd36606044f39346103113b14e4f5c1f463ebd28

  • SSDEEP

    768:muVAwlOX8rGfzP76snlb29sWvrSibL85ofZjHXfW0oZ+dyoRBRuli:muVzCTf297SWL85om+dyO4i

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ead0cad8e5551995411e595fc89018d4_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\ead0cad8e5551995411e595fc89018d4_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:4392

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads