Analysis

  • max time kernel
    94s
  • max time network
    115s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/10/2024, 00:24

General

  • Target

    157520c8409cd107c2a478a8082767e5_JaffaCakes118.exe

  • Size

    20KB

  • MD5

    157520c8409cd107c2a478a8082767e5

  • SHA1

    0d05d9978aa646abc2aad39e2857deae44bfe549

  • SHA256

    b74652059844e3cdad330d75e1e0a56347d76c62edcafb0dcb01e88475aa6184

  • SHA512

    a9bdb57d7ee5ed4d99f9a8dffe641c880e920add3cf3ee9f0cdcb2befba2911de2ca896f1cd7605e65f666dff7e8080806027d51bdf2067c832d7e1c45a5c7b3

  • SSDEEP

    192:rDR+EpRCj6KKH0UgaAfgHczm+R79mH6WBGKhWqBQk+wjj0+:rDPAj48aAt4a25hsbwjj0+

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\157520c8409cd107c2a478a8082767e5_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\157520c8409cd107c2a478a8082767e5_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:3996

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads