Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
27/09/2024, 02:12
General
-
Target
f9844bbdadb37d070f795bcdba0f5297_JaffaCakes118.exe
-
Size
631KB
-
MD5
f9844bbdadb37d070f795bcdba0f5297
-
SHA1
65716c2396e0afd829ca1699e99c43c08d6d4428
-
SHA256
fd6dfa5700b702f1b33fc1c61f9b95647b7cd752edf83b875685183e712c848a
-
SHA512
7a3221a8741a6f19f4a4014a6dfea2dc65dc628212e6a0018b36b44bda695235b0b9c7cd7bf4b266cc6b5dfe5fa401793ec0857fa026d347748d804c25dd21fc
-
SSDEEP
12288:RNoFmw6FvnRuzg/axX7JY+eSUSuuFi4A547+8pVpDckHxYfpp7:RNlw8vnRuzg/axLJY+cSJFi4ACy8pVpc
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f9844bbdadb37d070f795bcdba0f5297_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f9844bbdadb37d070f795bcdba0f5297_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx