Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
19-09-2024 12:02
General
-
Target
eb4b5efd3e2ac63a121776a5d8dcdeae_JaffaCakes118.exe
-
Size
2.6MB
-
MD5
eb4b5efd3e2ac63a121776a5d8dcdeae
-
SHA1
03c72476e5377f9cc392107f5d96e7d3bdec96c2
-
SHA256
1bc4d03c79e1239d9e5e97966fca2b1687eb5fdf83dd2a8f7e8bb8e59c85b6ac
-
SHA512
4cc0e4a5d50653ddebeab9014f8f99ddd74f8662c3f3703d694bf14387bde095e113f3bb46374c16470888d24a29e2f9f23970f0bc740872e875c96afa4c26d6
-
SSDEEP
49152:xokBmiyCkZ81RD9LbYciKuTTUoheUdq1:qkMiyCkejDJiKu3UoheYu
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\eb4b5efd3e2ac63a121776a5d8dcdeae_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\eb4b5efd3e2ac63a121776a5d8dcdeae_JaffaCakes118.exe"1⤵
- Drops file in System32 directory
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx