Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17-08-2024 14:47

General

  • Target

    a2f6d3991084e6c9cdb37ea569603d0c_JaffaCakes118.exe

  • Size

    30KB

  • MD5

    a2f6d3991084e6c9cdb37ea569603d0c

  • SHA1

    d16ffc38827799d6ab349748c90bff3719d866a7

  • SHA256

    e3291fc1404534ee614f5dabc4df6e17d602210b71ffb20c30d6a11e8e7a6c7c

  • SHA512

    d2c338af33740344cc4f0bc54d2e42f7569b8cb3dca6208b7e95db23a03cb12f8129f98da928bbeaa6f3574404e9a590fbf58bddb127a287d0b5557518ccef33

  • SSDEEP

    192:qlDEcSNQj543sfZpf6pbmktIifUpf4KF5/sESGQ:aDLqc7fXDifKb+GQ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\a2f6d3991084e6c9cdb37ea569603d0c_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\a2f6d3991084e6c9cdb37ea569603d0c_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3328

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3328-0-0x0000000000130000-0x0000000000137A80-memory.dmp

    Filesize

    30KB

  • memory/3328-1-0x0000000000130000-0x0000000000137A80-memory.dmp

    Filesize

    30KB

  • memory/3328-2-0x0000000000130000-0x0000000000137A80-memory.dmp

    Filesize

    30KB

  • memory/3328-3-0x0000000000130000-0x0000000000137A80-memory.dmp

    Filesize

    30KB

  • memory/3328-4-0x0000000000130000-0x0000000000137A80-memory.dmp

    Filesize

    30KB

  • memory/3328-5-0x0000000000130000-0x0000000000137A80-memory.dmp

    Filesize

    30KB

  • memory/3328-6-0x0000000000130000-0x0000000000137A80-memory.dmp

    Filesize

    30KB

  • memory/3328-7-0x0000000000130000-0x0000000000137A80-memory.dmp

    Filesize

    30KB

  • memory/3328-8-0x0000000000130000-0x0000000000137A80-memory.dmp

    Filesize

    30KB

  • memory/3328-9-0x0000000000130000-0x0000000000137A80-memory.dmp

    Filesize

    30KB

  • memory/3328-10-0x0000000000130000-0x0000000000137A80-memory.dmp

    Filesize

    30KB

  • memory/3328-11-0x0000000000130000-0x0000000000137A80-memory.dmp

    Filesize

    30KB

  • memory/3328-12-0x0000000000130000-0x0000000000137A80-memory.dmp

    Filesize

    30KB

  • memory/3328-13-0x0000000000130000-0x0000000000137A80-memory.dmp

    Filesize

    30KB