Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    18/08/2024, 21:58

General

  • Target

    a86076a2cb57c3d31258552f840944d4_JaffaCakes118.exe

  • Size

    42KB

  • MD5

    a86076a2cb57c3d31258552f840944d4

  • SHA1

    cf544b1e6171cfbe23747849544fbf3f578f6e1f

  • SHA256

    23b656a2b2d36041c56eae0796cd4f02b2cfe17f7f1c4a0cbeafa8cb092f691b

  • SHA512

    da3c36854c9326f63d5fa8c2dbb90e3005559503214330c8d0b70ec4f89a93eabd4e7218c7f88afe2891dbc6534c4f8b8f0af55a8056651c6d2153d5fd1b2540

  • SSDEEP

    768:mCuq2QewG/+9W9M4P7rX60u2A9S7c6bSaqI4SznbmAk4BtR0TGi6EOZ8x:Buq2QavK4PPX6o7c630TGtEO+x

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\a86076a2cb57c3d31258552f840944d4_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\a86076a2cb57c3d31258552f840944d4_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2120

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2120-0-0x0000000000400000-0x0000000000411000-memory.dmp

    Filesize

    68KB

  • memory/2120-2-0x0000000000400000-0x0000000000411000-memory.dmp

    Filesize

    68KB

  • memory/2120-4-0x0000000000400000-0x0000000000411000-memory.dmp

    Filesize

    68KB

  • memory/2120-6-0x0000000000400000-0x0000000000411000-memory.dmp

    Filesize

    68KB