Analysis

  • max time kernel
    13s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    01-08-2024 20:57

General

  • Target

    81c3506de09c854033bdc8cc243baf63_JaffaCakes118.exe

  • Size

    44KB

  • MD5

    81c3506de09c854033bdc8cc243baf63

  • SHA1

    3218b632ec9d3debca88edbeaa0dbc903121b036

  • SHA256

    f3472d5d6ef9ca18c91a7051d10297846d078a4adabe5bd7fd2fbd8431ed2899

  • SHA512

    0861d2f4bd00fdbd9367ce1623ce5ab3ad2944dd5ab81c324227e1b9d1a50d4fb52825231657ebee5a1f1498221e2da0544c0385a16870131d64cf2055d35425

  • SSDEEP

    384:gmotnkKd0TlQCxfrwntajXjDWLi9k+7y/Q1nDcZ+e4lqlq3U:ankpTBPJn7qcnDcr5lSU

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\81c3506de09c854033bdc8cc243baf63_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\81c3506de09c854033bdc8cc243baf63_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1732

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1732-0-0x0000000000400000-0x000000000040B000-memory.dmp

    Filesize

    44KB

  • memory/1732-1-0x0000000000020000-0x000000000002B000-memory.dmp

    Filesize

    44KB

  • memory/1732-2-0x0000000000020000-0x000000000002B000-memory.dmp

    Filesize

    44KB

  • memory/1732-3-0x0000000000400000-0x000000000040B000-memory.dmp

    Filesize

    44KB