Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-07-2024 23:11

General

  • Target

    71a28f1d3b1b6bfe35894b4dc89c446c_JaffaCakes118.exe

  • Size

    175KB

  • MD5

    71a28f1d3b1b6bfe35894b4dc89c446c

  • SHA1

    39e38ba4f9aa3987671f41e9fa0e836de9c859e2

  • SHA256

    454bc79d80b5149926793e483d958682f52d29d407d6ae1e6cd255a65cf325ea

  • SHA512

    03ff3c61aa3ec3f29f4ac92e815d5e28b0c58eeda97b174145606f0923c6f7f7ab4196930635ee31cbce7f8ce92ddffa8ccd961847daaa6c7400ce47e971213e

  • SSDEEP

    3072:oiO5h3sArZgo81yyo7G/YK1C4fOJRgbqYvbnpqxM4sRi8DDZqnZ/5nDganK7lyk:oik3BS5dkG/Y2VfEM7DQZ/pDXnK

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\71a28f1d3b1b6bfe35894b4dc89c446c_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\71a28f1d3b1b6bfe35894b4dc89c446c_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2620

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2620-0-0x0000000000401000-0x0000000000405000-memory.dmp

    Filesize

    16KB

  • memory/2620-1-0x0000000000400000-0x000000000045F000-memory.dmp

    Filesize

    380KB

  • memory/2620-2-0x0000000000400000-0x000000000045F000-memory.dmp

    Filesize

    380KB

  • memory/2620-3-0x0000000000400000-0x000000000045F000-memory.dmp

    Filesize

    380KB

  • memory/2620-4-0x0000000000400000-0x000000000045F000-memory.dmp

    Filesize

    380KB

  • memory/2620-5-0x0000000000401000-0x0000000000405000-memory.dmp

    Filesize

    16KB