Analysis

  • max time kernel
    14s
  • max time network
    18s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    26-07-2024 21:10

General

  • Target

    75bc81c54ce280022e22315faeb4d7bf_JaffaCakes118.exe

  • Size

    2.0MB

  • MD5

    75bc81c54ce280022e22315faeb4d7bf

  • SHA1

    95e1a7e5d5df4ca1d043fefc803b6602cedf1842

  • SHA256

    1d7d93bb55b7ea80c200cc2ae19cbaf5a2f355a6b05ec9db3d23873a5b65cb99

  • SHA512

    1f899cc9c31d341f233334c8b2f538185885cbd16ecfc16e2d280ff637d28cb73c7c2de3b2fc843f027640489e8cefbd480c9185962c9902a688ff969a3eb57c

  • SSDEEP

    49152:KNv3n17rV/Q7S3pjslCmCbFOTBWgS/6Y9c2wajrPiAXrmV:KN/nXQ7ejsl5C4TBO/LRwajrPFrU

Score
7/10

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\75bc81c54ce280022e22315faeb4d7bf_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\75bc81c54ce280022e22315faeb4d7bf_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2260

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2260-0-0x0000000000400000-0x0000000000429000-memory.dmp

    Filesize

    164KB