Analysis
-
max time kernel
139s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
15/10/2024, 07:45
General
-
Target
468f7f133cbf6ab448d69e92a108f594_JaffaCakes118.exe
-
Size
801KB
-
MD5
468f7f133cbf6ab448d69e92a108f594
-
SHA1
c56441331a5d638e78da531d1353c16f14ca2594
-
SHA256
fd0bc2df815d342445a00082ed37e3c812543a0f19d401a242325026da9b5394
-
SHA512
bd2dff79fdd7a3a82cd99cd3957653c361a9f601a0a5c91f93f368d5f5a6db576fcfbdd046cc9fb9f636eb6dff56fe8e0234f8fdb9583b056ebab0cce2c4a0fe
-
SSDEEP
24576:4rkqwP0YBImHURqUO+1efRxvSW5VXwaOY5:4rkqLSIm1UZqRSkVAaOC
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\468f7f133cbf6ab448d69e92a108f594_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\468f7f133cbf6ab448d69e92a108f594_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx