Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
12/10/2024, 07:39
General
-
Target
39066f9f1a4e1095590f7eec8e31ad73_JaffaCakes118.exe
-
Size
72KB
-
MD5
39066f9f1a4e1095590f7eec8e31ad73
-
SHA1
7672bb2e8c35e2b393ff7c74cad6a44553e37156
-
SHA256
b624226f47ba791224eed534cc7e916291829a5fac1f3209005fa266ab65d813
-
SHA512
c1e4a05106a8e6f5986a7ff7664b0bfe43720e53922673f31667fdb787e852e02dd587f35670a210e8ba17478bb1236c370e492bb945f25a8e6732a07693824f
-
SSDEEP
768:udtwyNBV/esI5XkZlYXWga6DJK2IrK/appGMHysQcE2GypTK9LomdKyPXmyQSJd6:SNL/qXkMWp6DPpbpf1Jd6
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\39066f9f1a4e1095590f7eec8e31ad73_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\39066f9f1a4e1095590f7eec8e31ad73_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx