Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
08-10-2024 23:17
General
-
Target
26ec34c8ce02a38482de3a1b0812b602_JaffaCakes118.exe
-
Size
128KB
-
MD5
26ec34c8ce02a38482de3a1b0812b602
-
SHA1
ff3ceb45d0cbf19ce4395edc4dc563ce8a797a0d
-
SHA256
ed96e668cdc9914875d6c1ef5c4a0b7fab9ebe80b17c7110b2a321d856f5329d
-
SHA512
334419f07d0014181bf0f6b9d026a66c5336cdefc0ca04d09a3e77390a3ebed5b51b447ada33a96d353a1fafac94a55e849865634ec7efdb0fd2d993066d0ba8
-
SSDEEP
1536:A94YvNqAnMvrCLXcyAYitSfOCV8t8QHTLz9ciBqA6YvS:A94OnM+LXcaitSfp8GC+iv6r
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\26ec34c8ce02a38482de3a1b0812b602_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\26ec34c8ce02a38482de3a1b0812b602_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx