Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    28/09/2024, 22:07

General

  • Target

    fd3cc725cee1b57cfc24c77c3f5a62df_JaffaCakes118.exe

  • Size

    144KB

  • MD5

    fd3cc725cee1b57cfc24c77c3f5a62df

  • SHA1

    62901ff80f018ef99257b14da895acca57d5a6d6

  • SHA256

    348dee9a54c80df9c65d0af2197daad42ad796f6e0a1c625191effb21dee936c

  • SHA512

    33cfdb224c6301257419f9a107458e6ad1970659b141a66adc498b5bde9689c6ed25a7ee896952d0a0e91098104902acbadaedd5a51085f4e80401e78136002c

  • SSDEEP

    3072:ZgQ4M3GPabC29W29z29g29929q29v29U29529u29L29o29l29i29H29c29h29G2Y:y29W29z29g29929q29v29U29529u29L9

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fd3cc725cee1b57cfc24c77c3f5a62df_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\fd3cc725cee1b57cfc24c77c3f5a62df_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:2888

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads