Analysis
-
max time kernel
95s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
13/10/2024, 00:57
General
-
Target
3cf0027edf1a3931e920a782190ad882_JaffaCakes118.exe
-
Size
20KB
-
MD5
3cf0027edf1a3931e920a782190ad882
-
SHA1
47ff7a8c4475dfa271b2329763c2c3aa378e4431
-
SHA256
b4e891ef325f4d119e1ac4359959f794b0e5589a495bd5e48b84c0e9e176e27f
-
SHA512
37f8960769cd06ca76948c4a0df90d6fb5a674ef6e1a30579751ce0e9ac569b33a15f72f8e3aac78eb7a637c228f5dbfb33e826e8a94ee8725e8ae1bb4837f72
-
SSDEEP
192:P1D+gI+jMaonFib/6YXVcy4bYXSFMWq+:P1k+1EipVcy4bYCFMWq+
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3cf0027edf1a3931e920a782190ad882_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3cf0027edf1a3931e920a782190ad882_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx