Overview

overview

3

Static

static

1

8813c1a62d...18.exe

windows7-x64

3

8813c1a62d...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    141s
  • max time network
    105s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/08/2024, 23:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    8813c1a62df6e2fe4ac72d9e6f5afcef_JaffaCakes118.exe

  • Size

    3.2MB

  • MD5

    8813c1a62df6e2fe4ac72d9e6f5afcef

  • SHA1

    48ed84324a07b1a087564f4a385158da380838c4

  • SHA256

    8d2c8ec78fc05680c8594e201a64d31c5550b409af6acd28230be1b0308e1331

  • SHA512

    734f49b35384993a296f64a4b788838bd909981163fe1296137b082fbd246c0d2ed4fa3ed26f0430c0ce23eefd2ccbae9875f002ba5b4972933fbadb9b54f89f

  • SSDEEP

    49152:O7ISacQ8RHINETTiQ8sr4sHdFAX9yeKBWXgNxoTjVpgoGu:sRHIuPXHdFAtyeKkXgNxad

Score
3/10
discovery

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\8813c1a62df6e2fe4ac72d9e6f5afcef_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\8813c1a62df6e2fe4ac72d9e6f5afcef_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:4208

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4208-0-0x0000000002370000-0x0000000002371000-memory.dmp

    Filesize

    4KB

    Download

  • memory/4208-6-0x0000000000400000-0x00000000005D8000-memory.dmp

    Filesize

    1.8MB

    Download