Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    25-07-2024 21:48

General

  • Target

    715e07424ce356322ba8e4d32ac6b769_JaffaCakes118.exe

  • Size

    60KB

  • MD5

    715e07424ce356322ba8e4d32ac6b769

  • SHA1

    497a585d7d6cbc0e1504412a7ed429ef52916460

  • SHA256

    70df1110bb3e2bcfb5a112bfb99707aa9aba2fcb733d393eb16dc7744a94183a

  • SHA512

    53d90f448aa327ffb575ce4cac025c55b6531977c921ceb7177d91c17a7587b7085a9c07ff5fdf247b08fe60d2fcca6a9d57660da547ac530e031f5dbabfd554

  • SSDEEP

    1536:rQqlfLDDIZFRzHd59K30kA6miJf7WIH2OLJK:rQqlfLnIHHcvA7i8YLJK

Score
8/10

Malware Config

Signatures

  • Drops file in Drivers directory 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\715e07424ce356322ba8e4d32ac6b769_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\715e07424ce356322ba8e4d32ac6b769_JaffaCakes118.exe"
    1⤵
    • Drops file in Drivers directory
    • System Location Discovery: System Language Discovery
    PID:2824

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2824-0-0x0000000000400000-0x0000000000426000-memory.dmp

    Filesize

    152KB