Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    03/10/2024, 23:35

General

  • Target

    10ee4245ae1d0071272382420557cf40_JaffaCakes118.exe

  • Size

    44KB

  • MD5

    10ee4245ae1d0071272382420557cf40

  • SHA1

    e5b8a98dbf9b82b6a4eca1dbb6913d1f93d1a41c

  • SHA256

    4d9638f5e388651bff8e196e246a108cdd71f82417e62f6baaf38af309fee72b

  • SHA512

    5d4a93861d565ba2dc64e82cc5e5b3ea84da0f0a1cd86595a4310555cd6184047441f09c62b025b1f1477ad9f6a0f41d10ff3d540805bfa495279ebe61d1fd8e

  • SSDEEP

    768:ufzNFxPfNSN/mAJXv6Je1JCInVMkmEynFYH1VP:u7NFxXNSN/mYvtCI2fFYH7

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\10ee4245ae1d0071272382420557cf40_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\10ee4245ae1d0071272382420557cf40_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:1720

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads