Analysis
-
max time kernel
95s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
31-12-2024 18:53
General
-
Target
JaffaCakes118_2ff72f4cb74792c45a2d27a01acca264.exe
-
Size
584KB
-
MD5
2ff72f4cb74792c45a2d27a01acca264
-
SHA1
0307f4339a197318c0b6d4105b7db87691ff4708
-
SHA256
c1f1c9aa77b5b5fc59c2ded5ae0ffc6f5b9afe7232bcc251059542318fc0d0cd
-
SHA512
65bcc4d659e2a699a8b337c52fb64ba937baa70674526b260fe4684736324ad092880274c8866c7c104dfc068fc3906da795a1c21ce927ec13cc75c4bb00a8d4
-
SSDEEP
12288:hEYDoAU/U3AVE2gNrY9iH8+1YMfZlAAeG7a42f:2YkAU/6AVE2Urp8+1dZV90f
Score
10/10
Malware Config
Signatures
-
Guloader family
-
Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_2ff72f4cb74792c45a2d27a01acca264.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_2ff72f4cb74792c45a2d27a01acca264.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
72KB