Analysis
-
max time kernel
95s -
max time network
102s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
03/10/2024, 15:54
General
-
Target
0f7a316030ea7af9ed4c1519ac09c9bd_JaffaCakes118.exe
-
Size
308KB
-
MD5
0f7a316030ea7af9ed4c1519ac09c9bd
-
SHA1
004e5747fcdaa59fa422a3c50ab603b103aafee8
-
SHA256
bb2a7f6e51e0e351b9dfde767bb112bdd8a579ff89930691e19f3818c90bdfac
-
SHA512
cb7d0808a698a5ba169e81bd0781c5c42a8be45afd1d5526a8fc21413f1ea7eb3b9e7ffb1efe76154a80fbfa0fb9bc312ebbc195665a1e9ee16e3666d7e9ad25
-
SSDEEP
3072:pRI4odDm4QIdbKvd+XeY8u2Pb8viVIhjlRY2P/Y5LUh9b+23pfWr8MQlYH/j8JTe:kZmUdbMu2PbX8jzdXS69bj8iOF
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0f7a316030ea7af9ed4c1519ac09c9bd_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0f7a316030ea7af9ed4c1519ac09c9bd_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx