Analysis

  • max time kernel
    139s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/08/2024, 09:54

General

  • Target

    959980f330cc163cdcc71256def4ee1a_JaffaCakes118.exe

  • Size

    66KB

  • MD5

    959980f330cc163cdcc71256def4ee1a

  • SHA1

    8fd963db7926f167f6603373a821cef33650645a

  • SHA256

    ab31e6e2cc809c7abdcb88d77fa1b2a74d9fb4658ec236f94534b80d4d8676aa

  • SHA512

    c3f3734290a88401fe7d63d0c04e3a0fa03b05f684419d90bca88f540eb0b7713f595354388a534324fce5a977c376323f89fc0cfe026786eec912e4b2b3d6b0

  • SSDEEP

    1536:V+orQOLAC130p6NYtXF/t0Aqx5n/uleP9KHXw7uqEyV1kH3+:VxA80pDdt0VYg1KHA7uqEygH3

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\959980f330cc163cdcc71256def4ee1a_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\959980f330cc163cdcc71256def4ee1a_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1392

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1392-0-0x0000000000400000-0x0000000000420000-memory.dmp

          Filesize

          128KB

        • memory/1392-1-0x0000000000400000-0x0000000000420000-memory.dmp

          Filesize

          128KB