Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
29/09/2024, 10:16
General
-
Target
fe502517bf790032d97db8b92e683cc8_JaffaCakes118.exe
-
Size
2.0MB
-
MD5
fe502517bf790032d97db8b92e683cc8
-
SHA1
b6b08666301fd35cc0333e896c43a663ccc777fe
-
SHA256
d0fb1c979a2526367dea3ced750d9318bd025c45650e49fd948eb69ae4ad5e49
-
SHA512
ca930d1da72199a532141a3370d315b0dea142fb069b87b9082eda8613738ccf4534da1777997a07b99aed253af080d9591e34bb9787f24a9caaf9d37d42bcec
-
SSDEEP
49152:qGeGv2cLOz2y3H4juIPpGWgT55YZki+Nq0:qGeG2cLRy9Ht5bvq0
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fe502517bf790032d97db8b92e683cc8_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\fe502517bf790032d97db8b92e683cc8_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx