Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
21/09/2024, 20:40
General
-
Target
f09269dbd9fc1b422db66ca611d0657b_JaffaCakes118.exe
-
Size
56KB
-
MD5
f09269dbd9fc1b422db66ca611d0657b
-
SHA1
b2ee608ced7f1ba662aaa91a5a2974e79b336691
-
SHA256
4b9ec08b69d0c7ecbc3addc511d3930a15de0d4686a2b000041e4a348b54dac4
-
SHA512
f23818e841739f5e877d62e3729d581608e1648882c8cbc2df46908ddf239a392e13390e2b79a3a94eeed1fe244dc51961c548c15d0c76e1283ad9e2b9ffcc30
-
SSDEEP
768:Zs9cBPgaY1X1zTgC/522hoVlXFjwXV8yZeoM93Hvv6FVna5dgYOV/SB8r/58BBV7:W9cLYTphoWXwv+eBBV8Q0U3n
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f09269dbd9fc1b422db66ca611d0657b_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f09269dbd9fc1b422db66ca611d0657b_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx