Analysis

  • max time kernel
    94s
  • max time network
    123s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-09-2024 20:57

General

  • Target

    f6d86dfc9c1de3836e57f32bc932aeef_JaffaCakes118.exe

  • Size

    24KB

  • MD5

    f6d86dfc9c1de3836e57f32bc932aeef

  • SHA1

    01f324b50b90491caa636d8bb3dd2755a96c141c

  • SHA256

    2cd832e0a98c313bca615d57855889cd8bec0fe202b4694879426ea57c2c266c

  • SHA512

    6640e8eef4b02a2e9299be70f87391518a8b1eddf6aa73585475f653a1ce24f622cb53231f412e4af080c89b2220e85ec74f365a5644b1c23fc28aee2b98ebd4

  • SSDEEP

    192:UStt+ELGsDi8DHbpI3RZLt9FgEmaNjZoW3DwraB/9K:USttDD74mVaNj2W3Dwre/9K

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f6d86dfc9c1de3836e57f32bc932aeef_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\f6d86dfc9c1de3836e57f32bc932aeef_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:3684

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads