Analysis

  • max time kernel
    140s
  • max time network
    137s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/08/2024, 20:17

General

  • Target

    949510f32c2e8a0facd4944fcdcf53b4_JaffaCakes118.exe

  • Size

    164KB

  • MD5

    949510f32c2e8a0facd4944fcdcf53b4

  • SHA1

    eb4a987b0325ad8bb75cc69de85783377dc54c19

  • SHA256

    5bbfbf74a2edd71b35b12d6d2b947ab6e4ac10d519c751b3bc4a982bb12e37cb

  • SHA512

    643dba6a0107ddfc74f2edc3bb9875eac7c797db84ce12e8ba4a0a472f96573966449d9b74d41e2fae61e4e44db0310cbad1bf45383622daa22648f8d34813ad

  • SSDEEP

    3072:a6JtxT2e0s0FlMQxK43Lvevi3AiBAG2BB5eF4BWiGG9gA3f4J:a6Dxye0OQf37eOAJ5Y4y

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\949510f32c2e8a0facd4944fcdcf53b4_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\949510f32c2e8a0facd4944fcdcf53b4_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3016

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3016-0-0x00000000747EE000-0x00000000747EF000-memory.dmp

          Filesize

          4KB

        • memory/3016-1-0x00000000008B0000-0x00000000008E0000-memory.dmp

          Filesize

          192KB

        • memory/3016-2-0x00000000051D0000-0x000000000526C000-memory.dmp

          Filesize

          624KB

        • memory/3016-3-0x0000000005820000-0x0000000005DC4000-memory.dmp

          Filesize

          5.6MB

        • memory/3016-4-0x0000000005270000-0x0000000005302000-memory.dmp

          Filesize

          584KB

        • memory/3016-5-0x0000000005150000-0x000000000515A000-memory.dmp

          Filesize

          40KB

        • memory/3016-6-0x0000000005400000-0x0000000005456000-memory.dmp

          Filesize

          344KB

        • memory/3016-7-0x00000000747E0000-0x0000000074F90000-memory.dmp

          Filesize

          7.7MB

        • memory/3016-8-0x00000000747EE000-0x00000000747EF000-memory.dmp

          Filesize

          4KB

        • memory/3016-9-0x00000000747E0000-0x0000000074F90000-memory.dmp

          Filesize

          7.7MB