Analysis

  • max time kernel
    140s
  • max time network
    106s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/08/2024, 12:15

General

  • Target

    8a52e0eaf2ea0652717b1c1a6d0001e7_JaffaCakes118.exe

  • Size

    86KB

  • MD5

    8a52e0eaf2ea0652717b1c1a6d0001e7

  • SHA1

    05f272b089999e6d1b12925afb33199e3409ae63

  • SHA256

    b228e35bf7f479966321778d27eb3e0b2e108317ef5a83db4808350c4d9ec157

  • SHA512

    48e89e9e5ce7e06aee6e279ddbd1f398943b705e0914df0b58e7a2fd1723b9eb7a2b9f472d9343285932d547f4bf02e03ae3dc61f00a39d34c004e6b8a575e91

  • SSDEEP

    1536:5ZHUJSZteRpQfnScPkIql8FxRGAI62TLe7UkpxzCcudUR5SLNeMjt3YE5:5Z0sfeRpEbkIlFDGAH2G7UkxMWRELNeM

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\8a52e0eaf2ea0652717b1c1a6d0001e7_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\8a52e0eaf2ea0652717b1c1a6d0001e7_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1776

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1776-0-0x0000000001000000-0x0000000001018000-memory.dmp

    Filesize

    96KB

  • memory/1776-1-0x0000000001000000-0x0000000001018000-memory.dmp

    Filesize

    96KB