Analysis

  • max time kernel
    141s
  • max time network
    135s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-08-2024 06:14

General

  • Target

    a9e75765df0775bee71cd33fdea0c0e9_JaffaCakes118.exe

  • Size

    491KB

  • MD5

    a9e75765df0775bee71cd33fdea0c0e9

  • SHA1

    846412a39d9b4c5e5ff0f3a6c8c3924b28bbdd07

  • SHA256

    4bc3dc613cdb6ab9fb4bcdd0475b059e3587e28c18a2ccf3e80da7e7a3267de0

  • SHA512

    d8dfe3c052736d501925452905158d0ab6762f8b415ae92a46152c03eb45eef249152729a4aa892298dab279dba13b371199a6f498b979b9d81b5f81707c326e

  • SSDEEP

    6144:JnnJ6iBx7HhYENEyhYNHYY/A64oBWm/qkp99o3b+Eipz9HVQyppGZitfKx/8GcsO:JnUIjFVIAifSkvY6z9HVQgd+esTCmVZ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a9e75765df0775bee71cd33fdea0c0e9_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\a9e75765df0775bee71cd33fdea0c0e9_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2356

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2356-0-0x0000000000400000-0x0000000000B90000-memory.dmp

    Filesize

    7.6MB

  • memory/2356-1-0x0000000002950000-0x0000000002992000-memory.dmp

    Filesize

    264KB

  • memory/2356-9-0x00000000029B0000-0x00000000029B1000-memory.dmp

    Filesize

    4KB

  • memory/2356-12-0x0000000002B50000-0x0000000002B52000-memory.dmp

    Filesize

    8KB

  • memory/2356-11-0x0000000002B10000-0x0000000002B11000-memory.dmp

    Filesize

    4KB

  • memory/2356-10-0x0000000002920000-0x0000000002921000-memory.dmp

    Filesize

    4KB

  • memory/2356-24-0x0000000002C20000-0x0000000002C21000-memory.dmp

    Filesize

    4KB

  • memory/2356-23-0x0000000002C30000-0x0000000002C31000-memory.dmp

    Filesize

    4KB

  • memory/2356-22-0x0000000002BD0000-0x0000000002BD1000-memory.dmp

    Filesize

    4KB

  • memory/2356-21-0x0000000002C00000-0x0000000002C01000-memory.dmp

    Filesize

    4KB

  • memory/2356-20-0x0000000002C10000-0x0000000002C11000-memory.dmp

    Filesize

    4KB

  • memory/2356-19-0x0000000002B80000-0x0000000002B81000-memory.dmp

    Filesize

    4KB

  • memory/2356-18-0x0000000002B30000-0x0000000002B31000-memory.dmp

    Filesize

    4KB

  • memory/2356-17-0x0000000002B20000-0x0000000002B21000-memory.dmp

    Filesize

    4KB

  • memory/2356-56-0x0000000003050000-0x0000000003051000-memory.dmp

    Filesize

    4KB

  • memory/2356-55-0x0000000003070000-0x0000000003071000-memory.dmp

    Filesize

    4KB

  • memory/2356-54-0x0000000003080000-0x0000000003081000-memory.dmp

    Filesize

    4KB

  • memory/2356-59-0x00000000030B0000-0x00000000030B1000-memory.dmp

    Filesize

    4KB

  • memory/2356-57-0x00000000030A0000-0x00000000030A1000-memory.dmp

    Filesize

    4KB

  • memory/2356-58-0x0000000003060000-0x0000000003061000-memory.dmp

    Filesize

    4KB

  • memory/2356-53-0x0000000003040000-0x0000000003041000-memory.dmp

    Filesize

    4KB

  • memory/2356-52-0x0000000002EF0000-0x0000000002EF1000-memory.dmp

    Filesize

    4KB

  • memory/2356-51-0x0000000002F00000-0x0000000002F01000-memory.dmp

    Filesize

    4KB

  • memory/2356-50-0x0000000002ED0000-0x0000000002ED1000-memory.dmp

    Filesize

    4KB

  • memory/2356-49-0x0000000002EE0000-0x0000000002EE1000-memory.dmp

    Filesize

    4KB

  • memory/2356-48-0x0000000002EB0000-0x0000000002EB1000-memory.dmp

    Filesize

    4KB

  • memory/2356-47-0x0000000002EC0000-0x0000000002EC1000-memory.dmp

    Filesize

    4KB

  • memory/2356-46-0x0000000002E80000-0x0000000002E81000-memory.dmp

    Filesize

    4KB

  • memory/2356-45-0x0000000002E90000-0x0000000002E91000-memory.dmp

    Filesize

    4KB

  • memory/2356-44-0x0000000002E60000-0x0000000002E61000-memory.dmp

    Filesize

    4KB

  • memory/2356-43-0x0000000002E70000-0x0000000002E71000-memory.dmp

    Filesize

    4KB

  • memory/2356-42-0x0000000002E40000-0x0000000002E41000-memory.dmp

    Filesize

    4KB

  • memory/2356-41-0x0000000002E50000-0x0000000002E51000-memory.dmp

    Filesize

    4KB

  • memory/2356-40-0x0000000002E20000-0x0000000002E21000-memory.dmp

    Filesize

    4KB

  • memory/2356-62-0x0000000003530000-0x0000000003531000-memory.dmp

    Filesize

    4KB

  • memory/2356-61-0x0000000003150000-0x0000000003151000-memory.dmp

    Filesize

    4KB

  • memory/2356-60-0x0000000000400000-0x0000000000B90000-memory.dmp

    Filesize

    7.6MB

  • memory/2356-39-0x0000000002E30000-0x0000000002E31000-memory.dmp

    Filesize

    4KB

  • memory/2356-38-0x0000000002D00000-0x0000000002D01000-memory.dmp

    Filesize

    4KB

  • memory/2356-37-0x0000000002D10000-0x0000000002D11000-memory.dmp

    Filesize

    4KB

  • memory/2356-36-0x0000000002CE0000-0x0000000002CE1000-memory.dmp

    Filesize

    4KB

  • memory/2356-35-0x0000000002CF0000-0x0000000002CF1000-memory.dmp

    Filesize

    4KB

  • memory/2356-34-0x0000000002CC0000-0x0000000002CC1000-memory.dmp

    Filesize

    4KB

  • memory/2356-33-0x0000000002CD0000-0x0000000002CD1000-memory.dmp

    Filesize

    4KB

  • memory/2356-32-0x0000000002CA0000-0x0000000002CA1000-memory.dmp

    Filesize

    4KB

  • memory/2356-31-0x0000000002CB0000-0x0000000002CB1000-memory.dmp

    Filesize

    4KB

  • memory/2356-30-0x0000000002C80000-0x0000000002C81000-memory.dmp

    Filesize

    4KB

  • memory/2356-29-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2356-28-0x0000000002C60000-0x0000000002C61000-memory.dmp

    Filesize

    4KB

  • memory/2356-27-0x0000000002C70000-0x0000000002C71000-memory.dmp

    Filesize

    4KB

  • memory/2356-26-0x0000000002C40000-0x0000000002C41000-memory.dmp

    Filesize

    4KB

  • memory/2356-25-0x0000000002C50000-0x0000000002C51000-memory.dmp

    Filesize

    4KB

  • memory/2356-16-0x0000000002B70000-0x0000000002B71000-memory.dmp

    Filesize

    4KB

  • memory/2356-15-0x0000000002BF0000-0x0000000002BF1000-memory.dmp

    Filesize

    4KB

  • memory/2356-14-0x0000000002BE0000-0x0000000002BE1000-memory.dmp

    Filesize

    4KB

  • memory/2356-13-0x0000000002B40000-0x0000000002B43000-memory.dmp

    Filesize

    12KB

  • memory/2356-8-0x0000000000D70000-0x0000000000D71000-memory.dmp

    Filesize

    4KB

  • memory/2356-7-0x0000000002930000-0x0000000002931000-memory.dmp

    Filesize

    4KB

  • memory/2356-2-0x00000000029E0000-0x00000000029E1000-memory.dmp

    Filesize

    4KB

  • memory/2356-6-0x0000000002940000-0x0000000002941000-memory.dmp

    Filesize

    4KB

  • memory/2356-5-0x00000000029A0000-0x00000000029A1000-memory.dmp

    Filesize

    4KB

  • memory/2356-4-0x0000000000D50000-0x0000000000D51000-memory.dmp

    Filesize

    4KB

  • memory/2356-3-0x0000000000D60000-0x0000000000D61000-memory.dmp

    Filesize

    4KB

  • memory/2356-63-0x0000000003A50000-0x0000000003A51000-memory.dmp

    Filesize

    4KB

  • memory/2356-65-0x0000000002950000-0x0000000002992000-memory.dmp

    Filesize

    264KB

  • memory/2356-64-0x0000000003780000-0x0000000003781000-memory.dmp

    Filesize

    4KB

  • memory/2356-66-0x0000000003060000-0x0000000003061000-memory.dmp

    Filesize

    4KB

  • memory/2356-67-0x0000000000400000-0x0000000000B90000-memory.dmp

    Filesize

    7.6MB