Analysis

  • max time kernel
    94s
  • max time network
    138s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/09/2024, 14:05

General

  • Target

    fc7507f3ff50b047726d0d9342bf0727_JaffaCakes118.exe

  • Size

    56KB

  • MD5

    fc7507f3ff50b047726d0d9342bf0727

  • SHA1

    93f9f22aff2fc8c94e1957fdb29ff0b1722af3d8

  • SHA256

    4de27a9b6f97d8dbae3a8314f44406c10c8b0045ff3ff2d790d37308822fde94

  • SHA512

    0020e9a2aa6c10ee30f3ece1f67fd30b6cf7a3a7f53a3995a6e10c7294f57d95fde4c2157a2bfd2a53082f96ab6a7c201438ef713b40e1529a516cc6b6c69fd3

  • SSDEEP

    768:vT9oJUQpDe7TehMY9KNAL/c60cYiXYUNJ7w27+gC95LvYi:vcZVMY9KNc1XD/7rs95Lwi

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fc7507f3ff50b047726d0d9342bf0727_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\fc7507f3ff50b047726d0d9342bf0727_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:3516

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads