Analysis

  • max time kernel
    94s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240730-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240730-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-08-2024 21:31

General

  • Target

    81cbee31f8000f9d4a60759e6988c80a_JaffaCakes118.exe

  • Size

    135KB

  • MD5

    81cbee31f8000f9d4a60759e6988c80a

  • SHA1

    167f95af982597bf030dd982cd32bdae350076ae

  • SHA256

    5be73745298667a80a6006d7095c4e61f578a25e8347f726c3ada54ee3b89c03

  • SHA512

    08227fc3663e0d2e492bd1eddd7ef36c06b5f9261c0fbec6402b6095fa3d60d42edd799b58d86925d62c5baa984f175ac43473fc6d3903ecb79fe50410094904

  • SSDEEP

    3072:UgPLGN5MSn2qe8GmOLkobw1stzLxmwJoWDV3h1W5/WEHVSI79:7jGN5lnqmp1w5zVVeSA

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\81cbee31f8000f9d4a60759e6988c80a_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\81cbee31f8000f9d4a60759e6988c80a_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3948

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3948-0-0x0000000000400000-0x0000000000466000-memory.dmp

    Filesize

    408KB

  • memory/3948-2-0x0000000000400000-0x0000000000466000-memory.dmp

    Filesize

    408KB