Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    01/10/2024, 16:51

General

  • Target

    069a844bfeafc97a09af7d2275aec2d4_JaffaCakes118.exe

  • Size

    17KB

  • MD5

    069a844bfeafc97a09af7d2275aec2d4

  • SHA1

    6904997c277c2dfd6298022628591cd5ae8a681d

  • SHA256

    af33f1a7acbde519eccbd0e72113c4880e6952d6af6bb58867f93b5fc3995063

  • SHA512

    f5223185c52795a1c7056a6d7c24b58560e7043487426a346ce6531c77dd86ae969579062d978f383e4ab64a7293436cc107dcbf3289a29e69b030fcf43f516c

  • SSDEEP

    192:WqQUx2lflGY98AkTbeTrt07ssMmd+8V4hps7NsMRCZ20fah1EpywGEFDAzfE:WqQ+2lfl58QV07ssMmd+Thx53DA4

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\069a844bfeafc97a09af7d2275aec2d4_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\069a844bfeafc97a09af7d2275aec2d4_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:2392

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads