Analysis

  • max time kernel
    149s
  • max time network
    109s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17-08-2024 18:29

General

  • Target

    a3a67ed6a65f3b679f77a769fc954a5e_JaffaCakes118.exe

  • Size

    16KB

  • MD5

    a3a67ed6a65f3b679f77a769fc954a5e

  • SHA1

    76f1b4a57b2a1aaf93cfe0746c6327821f46a7f9

  • SHA256

    f11c89d4f79f64086c985a1081ec1062d4b2a06dc205b2aa0bc7b0a0e4c4aa36

  • SHA512

    02a88a2e063de00c730353938b9332aabe247c259c95dd9c2eee09ecb4168a4f7a48aad1635af39a8367b5215639246d3949d9c8142ebc663f389c6ed3c46adf

  • SSDEEP

    384:p0wcY9YvenSOcZUWGCgp1ffoMsvAEA/Am/O:wFeWGx1Ho5A//

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\a3a67ed6a65f3b679f77a769fc954a5e_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\a3a67ed6a65f3b679f77a769fc954a5e_JaffaCakes118.exe"
    1⤵
    • Adds Run key to start application
    • System Location Discovery: System Language Discovery
    PID:4544

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4544-0-0x0000000000400000-0x000000000040B000-memory.dmp

    Filesize

    44KB

  • memory/4544-1-0x0000000000400000-0x000000000040B000-memory.dmp

    Filesize

    44KB

  • memory/4544-2-0x0000000000400000-0x000000000040B000-memory.dmp

    Filesize

    44KB

  • memory/4544-3-0x0000000000400000-0x000000000040B000-memory.dmp

    Filesize

    44KB

  • memory/4544-4-0x0000000000400000-0x000000000040B000-memory.dmp

    Filesize

    44KB

  • memory/4544-5-0x0000000000400000-0x000000000040B000-memory.dmp

    Filesize

    44KB

  • memory/4544-6-0x0000000000400000-0x000000000040B000-memory.dmp

    Filesize

    44KB

  • memory/4544-7-0x0000000000400000-0x000000000040B000-memory.dmp

    Filesize

    44KB

  • memory/4544-8-0x0000000000400000-0x000000000040B000-memory.dmp

    Filesize

    44KB

  • memory/4544-9-0x0000000000400000-0x000000000040B000-memory.dmp

    Filesize

    44KB

  • memory/4544-10-0x0000000000400000-0x000000000040B000-memory.dmp

    Filesize

    44KB

  • memory/4544-11-0x0000000000400000-0x000000000040B000-memory.dmp

    Filesize

    44KB

  • memory/4544-12-0x0000000000400000-0x000000000040B000-memory.dmp

    Filesize

    44KB

  • memory/4544-13-0x0000000000400000-0x000000000040B000-memory.dmp

    Filesize

    44KB