Analysis
-
max time kernel
92s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
13/10/2024, 09:59
General
-
Target
3f350f5bc3520af466d835be13bc77a8_JaffaCakes118.exe
-
Size
172KB
-
MD5
3f350f5bc3520af466d835be13bc77a8
-
SHA1
512d4e24c5cdb01153ddb53ffcbf8251f96c3b94
-
SHA256
b4b02e9fb8ef6090a4087829019b9416c72a96266e070f184b2c5133bff77be5
-
SHA512
8b4c8684c53ec5261fe9591b7f843d4a3f1b65df9e21f4ed0da676273ca091157bfdc7f9eaebc5bc028f52148b9a67ffaf20fae0d50dac05cdc24b43e5de7785
-
SSDEEP
3072:IQbnqNr9wSsCtKh93QCErKY3k+SmHlGa0DA78s/sRxmKgymhR6:oNZgHErKGMwh0DA8s/sRxmKgym
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3f350f5bc3520af466d835be13bc77a8_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3f350f5bc3520af466d835be13bc77a8_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx