Analysis

  • max time kernel
    135s
  • max time network
    145s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/07/2024, 08:53

General

  • Target

    6afcfe217abeaba1f502a9f1a7b6ea0b_JaffaCakes118.exe

  • Size

    1.2MB

  • MD5

    6afcfe217abeaba1f502a9f1a7b6ea0b

  • SHA1

    4de905b1ddbbd911e918f2cacb25c2c380f03ed2

  • SHA256

    c9b1852449a603dbc3ede739f7d22126d2aaef15e0d5c418d53f3bb9dea5391d

  • SHA512

    7716338192a9c44dc7f9ecd071a6715f674c7c370f3cf83f5c8def080dff55e99379b5674f86559380a014c926f24800d94b607d3b6401f950e574d786270aab

  • SSDEEP

    24576:xT4UlYojPMM+pWdWFnICPKmVs/oqdTb8I0tVrSb91PTD9/qFul3XcXMG2:5xZIWdWBICCmK/oyb+VrSB1x4sXcXMN

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\6afcfe217abeaba1f502a9f1a7b6ea0b_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\6afcfe217abeaba1f502a9f1a7b6ea0b_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1988

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads