Analysis
-
max time kernel
93s -
max time network
99s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
04-10-2024 19:11
General
-
Target
149a833a8b12bebc5b750759e8ee9f0a_JaffaCakes118.exe
-
Size
40KB
-
MD5
149a833a8b12bebc5b750759e8ee9f0a
-
SHA1
238936a231f3c435b567b2eef591a0f7456c5542
-
SHA256
a95e828c8d27e44accd194077568dbbd344aacf319cc071a7e8f0a8ace015bc7
-
SHA512
93e9e62af56b7ab6196760a32d45b3d012746595356aa19dde255d807c8e25e4da373bbfdb956a783a34f0815076831ceb1c90c890b8a32c8d82fe00a10ee469
-
SSDEEP
384:1m/r5On/J15xVihvx5ZMaQah298aooX15Gs1m8eRWh5kNGXDEWynlM:1m/cn/J15xYhv7Z5FSduseWh5RzMlM
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\149a833a8b12bebc5b750759e8ee9f0a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\149a833a8b12bebc5b750759e8ee9f0a_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx