Analysis

  • max time kernel
    94s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-01-2025 17:40

General

  • Target

    JaffaCakes118_5e6b5e055ac881014f82014a80c55e5d.exe

  • Size

    105KB

  • MD5

    5e6b5e055ac881014f82014a80c55e5d

  • SHA1

    73f8eb93b06d832f5ca20ae919845f03516a4d76

  • SHA256

    59f0ed2262569d4c04b3cca238e8cb036ede117cf117973035390e417237515c

  • SHA512

    6becdaf41c837e62b71d17723ad205512145c04f98d4e36cdfec3ae805932ae46498f72bd39549b72da4596bbb865644e2180be1cc641dc2a82ecdff09da4376

  • SSDEEP

    1536:yWRTuStQJMpW+yf6Z64uecgWXTdNK//9t8obkKiAXS8Lne7fQ:5RTuSqJMpW+yyM14WDdQ//3jfbfLr

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_5e6b5e055ac881014f82014a80c55e5d.exe
    "C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_5e6b5e055ac881014f82014a80c55e5d.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:3088

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads