Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    20/08/2024, 00:16

General

  • Target

    ad2ae0394ff8762032804a19763eb309_JaffaCakes118.exe

  • Size

    11KB

  • MD5

    ad2ae0394ff8762032804a19763eb309

  • SHA1

    8f3dd6c3882b20831eb19c5604b66633fcb26901

  • SHA256

    a6cd363394b43d665a8f515c332a8219da10994db0ce2347c34a3c9f1b71548f

  • SHA512

    8931a155bbd06dcb93785a01a01ed7150f4a1d70fb4eefaa6dc35f26e2c9d7e0de6f4e231922913893f413cb7263681dfe8d83c6630610498b703c46a4401f7a

  • SSDEEP

    192:mvB0VbIy346xFYTWRtFuQ3tpLqfEO0zpUPEvubbwhjkZWZO+hh0NyUa4WnEDW2:GiV0b6xFYTWduqnqfqz1t48xE8iWnEDj

Score
7/10

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\ad2ae0394ff8762032804a19763eb309_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\ad2ae0394ff8762032804a19763eb309_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2736

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2736-0-0x0000000001000000-0x000000000100C000-memory.dmp

    Filesize

    48KB

  • memory/2736-1-0x0000000001000000-0x000000000100C000-memory.dmp

    Filesize

    48KB