Analysis

  • max time kernel
    148s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-07-2024 20:03

General

  • Target

    7106172e7b0d0067ba9dda43d99a987e_JaffaCakes118.exe

  • Size

    94KB

  • MD5

    7106172e7b0d0067ba9dda43d99a987e

  • SHA1

    7195560dc5dbc00d891ead7dc08caeb0e432fec8

  • SHA256

    2550e83b8ecdb635c975a342d7fb3562451012a3c61d2bba448d1d9141cf14cc

  • SHA512

    60aa4b69a4ec62eb4f5cf93218308c9bfcef1e888a3f20f02d7686e429565cc3f2e696a9184983b008a2dab2a081c81a2a2fa94448c9f9eada0ab675d752cd61

  • SSDEEP

    1536:NWXkqqcIjqF9O6Ye4G/JCI5K5eF6YnmmmIEjLHzgh4t62q/M3r3C8DgPSVFFzfSn:NWUqHkiOOx0q6YnbEjLHzgWw7ELCIgPq

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\7106172e7b0d0067ba9dda43d99a987e_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\7106172e7b0d0067ba9dda43d99a987e_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:760

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/760-0-0x0000000000400000-0x0000000000442000-memory.dmp

    Filesize

    264KB

  • memory/760-1-0x0000000000400000-0x0000000000442000-memory.dmp

    Filesize

    264KB