Analysis
-
max time kernel
96s -
max time network
104s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
10/10/2024, 13:43
General
-
Target
302984ea3a353d055f1531525f2646e8_JaffaCakes118.exe
-
Size
236KB
-
MD5
302984ea3a353d055f1531525f2646e8
-
SHA1
91178d8a157b082427d57daba480835fb09347a4
-
SHA256
0a95bd2394735eea59b5c86dd38f84c96a9a09b26f1c54c064d95af73ab26bf3
-
SHA512
120a30843373603bc75de6bda42f55a1c433f4ddb9429a16d64dd7283ead615d768d2dc2521e519b169540a2c03a9ba59de08bf73718e7fb9db305c12817d119
-
SSDEEP
3072:Bcgr6h5oq1VeNqie8wzA74/AsNFT4PMuySxmyA6NLABLQKByELshJflquP1eD:XrSCq1BXzY4/HNO0u9xmyBAKbCsdP
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\302984ea3a353d055f1531525f2646e8_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\302984ea3a353d055f1531525f2646e8_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx