Analysis

  • max time kernel
    132s
  • max time network
    20s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    26-07-2024 11:26

General

  • Target

    73dab2361e281522628eb6a1ab509fff_JaffaCakes118.exe

  • Size

    77KB

  • MD5

    73dab2361e281522628eb6a1ab509fff

  • SHA1

    8ce8146b9543028330382c3fbf0fe4f22d219a55

  • SHA256

    b3e43b39c6c1a1c8f65ff2134b5b8d2801aef66473afdca243231a156071c129

  • SHA512

    7ee91b88165b75ad86823eb2a99b1e5907bb8177f609bb0b98a1ef57c6f82615c75b9b556d05d0592ddbf2d3ac3054b6627b1dc33f7463d6bbd5fb16e6a51da6

  • SSDEEP

    1536:4WRciKxMhGu5qh3FKrykCygu/zYf7gi8d0/BhpZwH7HZrxLHryytpWIHmndu6Pds:4WRLhGkq9cekCygiYzgzd0/BD07HZrxT

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Drops file in System32 directory 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\73dab2361e281522628eb6a1ab509fff_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\73dab2361e281522628eb6a1ab509fff_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    • System Location Discovery: System Language Discovery
    PID:1848

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Windows\SysWOW64\BASSMOD.DLL

    Filesize

    35KB

    MD5

    10448d5c73f662052462b1be8eac88a6

    SHA1

    bc3d4ede5d313de9edf5d75512c03da09d63bbfd

    SHA256

    6a3a92e8767c3a7f1af45d1ac77dd9cfe2af0c34e76a9242354e0d79db7dca89

    SHA512

    ffb821e60f9ce81f4bfcb24558296be73b2d26203fcc90429abcf6406f8c75477b8283700df626da1ce390e3fcde6f870be239f10102b8c793ba9b6644378cd4

  • memory/1848-16-0x0000000010000000-0x000000001002E000-memory.dmp

    Filesize

    184KB

  • memory/1848-5-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/1848-18-0x0000000010000000-0x000000001002E000-memory.dmp

    Filesize

    184KB

  • memory/1848-6-0x0000000010000000-0x000000001002E000-memory.dmp

    Filesize

    184KB

  • memory/1848-7-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/1848-8-0x0000000010000000-0x000000001002E000-memory.dmp

    Filesize

    184KB

  • memory/1848-9-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/1848-10-0x0000000010000000-0x000000001002E000-memory.dmp

    Filesize

    184KB

  • memory/1848-11-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/1848-12-0x0000000010000000-0x000000001002E000-memory.dmp

    Filesize

    184KB

  • memory/1848-13-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/1848-14-0x0000000010000000-0x000000001002E000-memory.dmp

    Filesize

    184KB

  • memory/1848-15-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/1848-0-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/1848-32-0x0000000010000000-0x000000001002E000-memory.dmp

    Filesize

    184KB

  • memory/1848-4-0x0000000010000000-0x000000001002E000-memory.dmp

    Filesize

    184KB

  • memory/1848-19-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/1848-20-0x0000000010000000-0x000000001002E000-memory.dmp

    Filesize

    184KB

  • memory/1848-21-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/1848-22-0x0000000010000000-0x000000001002E000-memory.dmp

    Filesize

    184KB

  • memory/1848-23-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/1848-24-0x0000000010000000-0x000000001002E000-memory.dmp

    Filesize

    184KB

  • memory/1848-25-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/1848-26-0x0000000010000000-0x000000001002E000-memory.dmp

    Filesize

    184KB

  • memory/1848-27-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/1848-28-0x0000000010000000-0x000000001002E000-memory.dmp

    Filesize

    184KB

  • memory/1848-29-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/1848-30-0x0000000010000000-0x000000001002E000-memory.dmp

    Filesize

    184KB

  • memory/1848-31-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB

  • memory/1848-17-0x0000000000400000-0x000000000042A000-memory.dmp

    Filesize

    168KB