Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    09-10-2024 10:33

General

  • Target

    2f8aff6c06c77ef66d56f832839c717c_JaffaCakes118.exe

  • Size

    40KB

  • MD5

    2f8aff6c06c77ef66d56f832839c717c

  • SHA1

    0e74b3945d39af1c01fb93a6aaf33e5b448f2c83

  • SHA256

    c7d989ddb708cdf89631086c8aafd72773d4a8517aa865e73be632c8812109d3

  • SHA512

    646aa8e29e3b0948fc6f12aa92c94a70ee63c4323a731f8bfd91f39cfe393031360ffb688a5028226ef2d0719e43d73ea5344fbed2178c7765d4ddfbdc160b87

  • SSDEEP

    384:BBbKQR8DhPhXaTIKI8vG5gvCB5KPrpqQFqekx5mu5rIdDGS4:BhcLXaTIeG5/0rYh5mlNB

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2f8aff6c06c77ef66d56f832839c717c_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\2f8aff6c06c77ef66d56f832839c717c_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:2380

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads