Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
02-10-2024 01:37
General
-
Target
0848ae260c17c46ff99047a1cb199fcb_JaffaCakes118.exe
-
Size
188KB
-
MD5
0848ae260c17c46ff99047a1cb199fcb
-
SHA1
d266961cb8dcb9dc0d49ed37643514421d1486f1
-
SHA256
cff75849b800f4ad5033cae63e84ef52c99c0ded451525537a50d81e1db4d979
-
SHA512
b1be82bc6a83351910d00b20aa2d5e4480eb72bc41fa17a3090162a1cfa0a95d9a58464b860c5b88e26fb0a300e498890c45593fa9cafae3b76c2dcb5e588069
-
SSDEEP
3072:MiHgoJlsDzGUUXam+fiaqQsGJlGu5OGOGcGQiV7GP5WeagRuwyTtorlMA+ojrjom:LsDzeXaX6ssGJlGu5OGOGcGQiZGPUJID
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0848ae260c17c46ff99047a1cb199fcb_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0848ae260c17c46ff99047a1cb199fcb_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx