Analysis
-
max time kernel
96s -
max time network
106s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
02/10/2024, 14:25
General
-
Target
0b1c6d95fae5a4fdfbd54517d4acdc68_JaffaCakes118.exe
-
Size
272KB
-
MD5
0b1c6d95fae5a4fdfbd54517d4acdc68
-
SHA1
a66ed2aadfae8879cd711ce2ad57a26894acddfb
-
SHA256
bf45a53dbbcee03a778f64c6eeab8aa122e731e2c68bbf072b9c3c4418071f77
-
SHA512
4eafe0df9c9ac0e661674d93369476583b78f6aa08d2479b2ce783ba6bfccba028e9272e4a704d48d949d6b07cd69d39699225b81f4006b952f4841b41746471
-
SSDEEP
1536:tjuhEB25NYk5opKvAX1KC4pirALjMrqnAshRN5RUOQpu3qXCwIgKz6YUIFuK8WgD:tjuBz5Cp0CfAAgUOeEFz6hpmgxTWSMzU
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookAW 3 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0b1c6d95fae5a4fdfbd54517d4acdc68_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0b1c6d95fae5a4fdfbd54517d4acdc68_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookAW
- Suspicious use of SetWindowsHookEx