Analysis
-
max time kernel
93s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
04-10-2024 14:41
General
-
Target
13c6b4b632c72452aad82d1bb0ca5528_JaffaCakes118.exe
-
Size
650KB
-
MD5
13c6b4b632c72452aad82d1bb0ca5528
-
SHA1
09bdfed1ea3df024e2d7e9d9fd8ac1ec53adb4ea
-
SHA256
a4a4a0c0c117afda65890536b5d28534ed6ac7dc8b15afbd039ebed09cfc4831
-
SHA512
f70d79f32cf2d57f9bd29be82a92968d90139563693f87f2a25e255c2bf094230c24a5d57fe7cf205d12e442cc027b93a54963e4266e931fcd8f9cf93c9f755f
-
SSDEEP
12288:C7NnqnoX10VRdyat7JYZdGLQzvmPPxxkMm/wt1KNOoSVry1TpIV:C7Jqu10VRdya9JYDGLQzWJxRt1KNONVV
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\13c6b4b632c72452aad82d1bb0ca5528_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\13c6b4b632c72452aad82d1bb0ca5528_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx