Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
20/01/2025, 09:14
General
-
Target
JaffaCakes118_e2a7aa78742b96544546ef9478e604da.exe
-
Size
264KB
-
MD5
e2a7aa78742b96544546ef9478e604da
-
SHA1
0515238051af963d6a00983a4f11da40f1b5aae0
-
SHA256
7233d97380f1e18aa080c45c40a10b8cb916329f575419136a918a97dbb58a16
-
SHA512
55f775fb4fb8d2ffbd08795b39797334abfb9951fec8627c8be1e5aba090e91dc7e112b9400707cd95116063187c797dbe0bff1b975fe759d03c2ca17bb534d2
-
SSDEEP
6144:CgFWSvXaNmIf/fkZfqofFXbZIiG8zBzQ7xU:6/kxuiZztUK
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2a7aa78742b96544546ef9478e604da.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2a7aa78742b96544546ef9478e604da.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx