Analysis
-
max time kernel
94s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
12/10/2024, 20:49
General
-
Target
3bf8ceeb7d324ab27d9a4948d9a7c239_JaffaCakes118.exe
-
Size
20KB
-
MD5
3bf8ceeb7d324ab27d9a4948d9a7c239
-
SHA1
2fc2475623b3d48f60fa8ccd08f700ccd94d10d8
-
SHA256
d7efd091c50ffb64c91c2e954a3dd263e430df984a3575cb380692c0be720252
-
SHA512
29735849192c27cd15bfd40eddb24becd5527fb0a9f3fd4e479369862d44116e2bd678e9e2b0d554f8c0df7298daf04b8d973ff5c4223c5c03710d3e8a0825dd
-
SSDEEP
192:Cp12+gTWvGfG3CYwJygPfgCMiTwlbMQN8LMAsT93YOUdc0XFX:614xfICWggAUqMAsT93YOUC0XFX
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3bf8ceeb7d324ab27d9a4948d9a7c239_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3bf8ceeb7d324ab27d9a4948d9a7c239_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx