Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
20/09/2024, 23:17
General
-
Target
ee9f6cff6ddbf309cbd73262149ba272_JaffaCakes118.exe
-
Size
632KB
-
MD5
ee9f6cff6ddbf309cbd73262149ba272
-
SHA1
8336d8bf9edb2a325cf926b6518491d69d87df9a
-
SHA256
678ee552d8d881757480c42141ee64ff529ce8389dfabb838a56babaa11c2882
-
SHA512
37ceccf4917beff2bf3e90aa2f114977de3df830b021b9f592d632c1e0243677acbfd28ee8db89924fdbf986b03a5ffe51b1ac973d5c4f011ef44de21c9d7158
-
SSDEEP
12288:PlwBb+3fHVxUvaYSDgl7JYXnP3IoYmXaTdYuapUfXC5WL+ZV0p/S:Ply+3NxUvaYSDglJYXngoYmXaTdYyfSp
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ee9f6cff6ddbf309cbd73262149ba272_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ee9f6cff6ddbf309cbd73262149ba272_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx