Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/08/2024, 13:14

General

  • Target

    ab2a2c9fcf67ace09195a55c7e69a61e_JaffaCakes118.exe

  • Size

    197KB

  • MD5

    ab2a2c9fcf67ace09195a55c7e69a61e

  • SHA1

    dcbf3051caeaaeee82469bba8eb30123f5ec6814

  • SHA256

    2f21c0ff3fcf766fab452764600e30b2ec207745135405557b4d09edd6305f4f

  • SHA512

    f2aedec5cc637048f7fe5beac9dbea6fe00942fade341dbb5ef084548fdaf28fe61d798ed02e375931becaef214475dc3bb2256116a988286c22ba1d916aa9e6

  • SSDEEP

    3072:6oXU5eRdRt5wcTLtOY9Ea9DFQyykmjtThDZzQSSI/FLoLmfu0UWjYXjlBK:tXU+95wcTAY97DOyJmtRe6fnw

Score
7/10

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\ab2a2c9fcf67ace09195a55c7e69a61e_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\ab2a2c9fcf67ace09195a55c7e69a61e_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:656

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/656-0-0x0000000000400000-0x000000000046B000-memory.dmp

    Filesize

    428KB

  • memory/656-2-0x0000000000400000-0x000000000046B000-memory.dmp

    Filesize

    428KB