Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
27-09-2024 06:42
General
-
Target
f9eaed3ba007b9ed2d6d52b695ddf008_JaffaCakes118.exe
-
Size
20KB
-
MD5
f9eaed3ba007b9ed2d6d52b695ddf008
-
SHA1
67a018270bc92d560040872da25c8db481c53159
-
SHA256
2e3ebca691945ed0ffd3dd898bffae84e1fa6973ec7c623a055f81122b1fd05f
-
SHA512
6f6f0eba316d52d070d5fd5948634ec00c2bdf4271aa0e43df53b27a12007e35bc9feb308ba2933e838f83fd36e3032bfb592b990669b8e04bf5c687f15b5558
-
SSDEEP
192:7cALvFdqeAKXVRdnhN/vjaj1f/Zl+q7VdtZk5ZsDBx8MxQU7Zsl1oynD3suv:7cALvFdnVRxhN/7Mfl+sAS7p1S1B3sg
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies registry class 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f9eaed3ba007b9ed2d6d52b695ddf008_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f9eaed3ba007b9ed2d6d52b695ddf008_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of SetWindowsHookEx