Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
13/10/2024, 07:49
General
-
Target
3ea6411d517317fbb74d806a8da9c6d8_JaffaCakes118.exe
-
Size
1.4MB
-
MD5
3ea6411d517317fbb74d806a8da9c6d8
-
SHA1
b78a955d003771cc35b40c8202d5c98ba4a62f66
-
SHA256
aa12d5515dd0a8602aa8c157bcc519ad6a2993d09e9f1ec5e7528a534b7faca0
-
SHA512
fc9914f6806d87d5a8629316a1de7d51e6a1c328f4c9023f4b9fd6120797e8e1efb2786affd9bc9fade432563e239534a21b4d0a02a68fc2a9de83db34a5ca7d
-
SSDEEP
24576:9GLOfXTozJPCQMMDixCDdnyNWIV7XKZjdOgR8cfHMC:98OfXmqciW08IFYjdOs8cfHMC
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3ea6411d517317fbb74d806a8da9c6d8_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3ea6411d517317fbb74d806a8da9c6d8_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx