Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    27-07-2024 15:38

General

  • Target

    78a6d982aefb06208f9f84a6a1d7e23e_JaffaCakes118.exe

  • Size

    747KB

  • MD5

    78a6d982aefb06208f9f84a6a1d7e23e

  • SHA1

    d11d81ff10566d0f02f18cecb938764128fbeb23

  • SHA256

    75869f9c1edb9153b3f02cfdd7fe6e68c3d3cd8168712c8a7f6397385eb3917d

  • SHA512

    03a952f3da2f8ec94fcb634df56e5ddc3e4a6e93a76c1b0d6631cf2c86fc5ade4fb402eace216bd336c62690a292d4750e6cd5df8d829f8bcaf4f7bb2a7d0c64

  • SSDEEP

    12288:foCuX31tvrf6q7HWwN9qg2GS6RxXAr1/1K6941mKG7db9Q0E0jLry:fbuvrf6q7Bb5dk1tFsmKG7dbl

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\78a6d982aefb06208f9f84a6a1d7e23e_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\78a6d982aefb06208f9f84a6a1d7e23e_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2512

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2512-0-0x00000000003B0000-0x00000000003B1000-memory.dmp

    Filesize

    4KB

  • memory/2512-1-0x0000000000400000-0x00000000004C1000-memory.dmp

    Filesize

    772KB