Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
21/09/2024, 20:40
General
-
Target
f09232e7a66faf6aa40b239437191892_JaffaCakes118.exe
-
Size
88KB
-
MD5
f09232e7a66faf6aa40b239437191892
-
SHA1
4a3b5f5d79708eba37c6f6bd363c7ad1c6fafa4e
-
SHA256
d181a0d650ffa5469cd628cc1647487426229367ec2ee0f5410c7b8205bdb3ef
-
SHA512
8f8603f33eb100868d6b8ed941120246c180cd021ea5caa594132ccc8218230f816ab06fef0b12d6808311442d588219218f5d6222df1d21b1e481478faadbd7
-
SSDEEP
1536:tekcuLpKQsVKrQCdevtX7hxzHP8I0RoOrHIdp:teYLpBsVNJvtXrn+oD
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f09232e7a66faf6aa40b239437191892_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f09232e7a66faf6aa40b239437191892_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx