Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
25/07/2024, 13:28
General
-
Target
6fc4078c92239ae0b6928d78ae4fc30c_JaffaCakes118.exe
-
Size
399KB
-
MD5
6fc4078c92239ae0b6928d78ae4fc30c
-
SHA1
e8407057aebe63d974fa249274cbf92affa3b69e
-
SHA256
96783fbf42d0a1b38a41852cdc83118a1a04a0594545da102c5ee81184d24e5f
-
SHA512
8e673f4993543ff127ae3411156bb9ef4f228e4a22c39f5c0024b0d820704a315f53c052a9398d4620b7978b280a1f296264053a58f3dbbf64f19fcf463f91f9
-
SSDEEP
12288:+XcxiW/PnOOH5NQWqMF3cDgl8FYGq6h3m:lnxZNQKcDg2Yy1m
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\6fc4078c92239ae0b6928d78ae4fc30c_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\6fc4078c92239ae0b6928d78ae4fc30c_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5924 -s 2722⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 5924 -ip 59241⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
4KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB