Analysis

  • max time kernel
    140s
  • max time network
    106s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-08-2024 02:30

General

  • Target

    a939b501b5d5dbdf93e158f3afb5700a_JaffaCakes118.exe

  • Size

    184KB

  • MD5

    a939b501b5d5dbdf93e158f3afb5700a

  • SHA1

    6ba6912fc4f3197283ee1d0278cf8ccc6c67d182

  • SHA256

    2ee378c31cec9ba4c00a07970f519869031ff746313b5082d7469e60e35cc256

  • SHA512

    3b6057fd605efb6721b280705a654bcb4848d48fbe40c769c1069611c559727866c8965f6b28d3ff86253744779454c64e4b937b2cc1187f98efdcf107edf377

  • SSDEEP

    3072:VuL1Zogn2Qmekz1dxgUJWaqXYSzSZf1v43GXDmj:wZrn2Qm5kUW7oSzSJ542XDm

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\a939b501b5d5dbdf93e158f3afb5700a_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\a939b501b5d5dbdf93e158f3afb5700a_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1836

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1836-0-0x0000000000400000-0x0000000000461000-memory.dmp

    Filesize

    388KB

  • memory/1836-1-0x0000000000400000-0x0000000000461000-memory.dmp

    Filesize

    388KB