Analysis

  • max time kernel
    91s
  • max time network
    142s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21-01-2025 07:51

General

  • Target

    JaffaCakes118_03187597448f8b1e112228c2b48b5f66.exe

  • Size

    186KB

  • MD5

    03187597448f8b1e112228c2b48b5f66

  • SHA1

    4f81cc312ae07c07e998ea3bed733ad1a3c5597d

  • SHA256

    d5de81818c80eaa5324cdb390cf78948dcdceae55528036d0294db0b063e9743

  • SHA512

    3a138c3169f5467f7b775d3ed7fd9a2200c6d68a70e664825989be75d5f62c27def2fd00806882cc8ba891c5a045e4fd01a0a47b5a48021d8061ac152d44f2f3

  • SSDEEP

    3072:LTy+3kYEajtqC2kjJBFbUhb6NwWjXfxiRmMUPvuv7TGO+430031fNUdrScIlGkQB:LTt3kYEOtqC2EJBFbUhb6NwWjXJiROvt

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_03187597448f8b1e112228c2b48b5f66.exe
    "C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_03187597448f8b1e112228c2b48b5f66.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:3588

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads