Analysis
-
max time kernel
94s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19-09-2024 07:07
General
-
Target
ead17ba52aea362d7d4f30849e8b4729_JaffaCakes118.exe
-
Size
364KB
-
MD5
ead17ba52aea362d7d4f30849e8b4729
-
SHA1
0139b76f67970d484280f39b3588978cb0f75b63
-
SHA256
74940ef8119413bb2d64d5353e5e753e0c5e85b9611692e74f37ddef85d2a8e9
-
SHA512
5127bb9de94373c48e2aafe8a85c0de2253d5251b69b11efcee8ca627bac42759e2b8e674cb19c995cd949f7b60fe17b7e0a3710ea30c42b6407be2c1402ebb9
-
SSDEEP
6144:wq1FYU2vxGeRcXrjk+iECLJj8OFSGk2G/hTFsTMZTTTwTVTDT43mgTLToTvTwTh1:wUihvxGeREiDLJoO0Gk2W+CnMh3KfEbc
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ead17ba52aea362d7d4f30849e8b4729_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ead17ba52aea362d7d4f30849e8b4729_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx