Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    14/08/2024, 17:36

General

  • Target

    97054f75d4d0b75669d6a83cfd4d3ac1_JaffaCakes118.exe

  • Size

    120KB

  • MD5

    97054f75d4d0b75669d6a83cfd4d3ac1

  • SHA1

    675580d97d6845f3f20d0f44386ac42e4d518817

  • SHA256

    49237d2d5423b6e4a870e68f45e12890d40ac6b5ab8aaabfb2a1ffdbe53265c8

  • SHA512

    d42bd409016e9956940a812c23a2de0061e4211cd08f609ed04221e867d759cbe258ddb5e84f07992862f346ccc8bede58306ac4e6f9fbce1537a30bfab0eb0f

  • SSDEEP

    3072:9CXxLG0eIKu5EaBomawJi096+bocEXbVzoi12g:qIlmd9BolZ919

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\97054f75d4d0b75669d6a83cfd4d3ac1_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\97054f75d4d0b75669d6a83cfd4d3ac1_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: GetForegroundWindowSpam
    PID:1772

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads