0c6b7b1c9c24eb051c001c04df6d7f881406c65044872829b2109ee5627731ad

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
12/08/2024, 13:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8ed3f7562463e393608e1ec8b6688f98_JaffaCakes118.exe
Size

685KB
MD5

8ed3f7562463e393608e1ec8b6688f98
SHA1

43ac143edf514dbd3f97217bb96627f14856e822
SHA256

0c6b7b1c9c24eb051c001c04df6d7f881406c65044872829b2109ee5627731ad
SHA512

b33979bf9d78ea9b6940ee986a3bae2d44ac263678e3172eabb3d122e5750ff599517fc9433d36fd6ef9663b67abb99091c148d532edc228baa56d1683babe0d
SSDEEP

12288:m57T4UN3K3vwlhs5C7TTJZBZprkO9uAmRjUd/5z6CdmeYWs3q3gH67k:ST4Ul1sk7TTdBx/N6ZPbqQH6o

Score

3^/10

discovery

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	8ed3f7562463e393608e1ec8b6688f98_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\8ed3f7562463e393608e1ec8b6688f98_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\8ed3f7562463e393608e1ec8b6688f98_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2104

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...