Analysis

  • max time kernel
    14s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    09-10-2024 04:59

General

  • Target

    2b49b5e87c7e0c6085d4fbb17e4cc668_JaffaCakes118.exe

  • Size

    40KB

  • MD5

    2b49b5e87c7e0c6085d4fbb17e4cc668

  • SHA1

    facfa44a1669c932e5978b5d4d06647fbeacca5a

  • SHA256

    b1d69c2fb2d47942157a7b6a1ddf022c41cdd6c1c3b7a975de0b0098461eee8c

  • SHA512

    866e13e85358ece3c9c5b66abea232c12ac13edbdda93f2a3959430a205546491de7472e110de30c660d2b8744afdf30819c9e7e49780de0bec4653ddb5624fb

  • SSDEEP

    768:/SLeMFa5wOx849o1OxLgnw4+ImKoaSiqecWiGi4A8yO5asP0YA5nXmB0TMo/2MHD:/SCwOx849w+Lgnw4+ImKoaSiqecWiGiv

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2b49b5e87c7e0c6085d4fbb17e4cc668_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\2b49b5e87c7e0c6085d4fbb17e4cc668_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:3060

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads