Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
04/10/2024, 04:24
General
-
Target
11d230d694bd28cd8410899af865a024_JaffaCakes118.exe
-
Size
144KB
-
MD5
11d230d694bd28cd8410899af865a024
-
SHA1
b53e5dcdaaac4d4643780a02f5445914dd9b883d
-
SHA256
ce4493c45da21a601cc07f660438fdcfe057b0eb31132155681f2061a3520428
-
SHA512
53de48e1b0408dcf52e10ed5f07fe99a9ca3e14d27225f62d89c83e11991ce35d93b26ea0ff6ae66f15526e415d3b575c202774ab195b1aaaef14c0441243050
-
SSDEEP
1536:tl0BRGXW0C/3DsprL+aCaDy7bKpj6o3Ol0628HYRGGxL:/CN3DsprLKaDPiML
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 29 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\11d230d694bd28cd8410899af865a024_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\11d230d694bd28cd8410899af865a024_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx