Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
01-10-2024 07:49
General
-
Target
04eae6c2ab7a7eb40351d7ddc2a329ec_JaffaCakes118.exe
-
Size
658KB
-
MD5
04eae6c2ab7a7eb40351d7ddc2a329ec
-
SHA1
4575a40a5377613ff39a63997db44e21fb3c5335
-
SHA256
e82a3ac666f0c1b2d9b006fcb279fa0d717d38de42cf9fbe75cda93fc4793f97
-
SHA512
e44bf609e35fb7b7c48b014cd19f3b31ba0f68e9ae23e87d60e7be8a4446612326b536fa710f47691676e48c6cb2dfdab0a85cfd2e3d989c28b43981b0926974
-
SSDEEP
12288:jZexKGzSc8jJNYuPN7JYXVjMEaTlfGhnHbsamyLpC5GuMPmFIpBs:jZetzoFNYuPdJYXVjMNgH9CYuMeos
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\04eae6c2ab7a7eb40351d7ddc2a329ec_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\04eae6c2ab7a7eb40351d7ddc2a329ec_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx