Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    24/07/2024, 08:33

General

  • Target

    6aefbc2a1486293baa43654286cb7bd4_JaffaCakes118.exe

  • Size

    161KB

  • MD5

    6aefbc2a1486293baa43654286cb7bd4

  • SHA1

    059569e99d81b3ebccc7b5c326f07f94e6d59411

  • SHA256

    45163ba8c50855c2986277afc4cd90af243d189c16cac343405aadd93bde5b2d

  • SHA512

    9a1f8d523cac770d0fb196e82dc41acf2b37b9d244508c15e86274c33ccf0a038a3663b8c0b3cad83c08815238d72995fdd59255786df89874e1faf151584470

  • SSDEEP

    3072:kZGlFw7fonu4sPJBxeDEcr1iF+f6mExXBxEXZIUUL02WU4RUQMHltXqrB:UWwMnudw7r1g+fhuxICL02IMFt6

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\6aefbc2a1486293baa43654286cb7bd4_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\6aefbc2a1486293baa43654286cb7bd4_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2880

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads