Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20-08-2024 01:14

General

  • Target

    ad5530c7fb5117154d563918e4e058f6_JaffaCakes118.exe

  • Size

    72KB

  • MD5

    ad5530c7fb5117154d563918e4e058f6

  • SHA1

    f23b0bb0780a4a0507d6b238d3dadc6c977572e6

  • SHA256

    e7fcd0a294fc41618f756a0f8bfb42950234097fc879883a71a411d8fc9e91a2

  • SHA512

    7780ec50ffba5fc813dc98da496b193679f59d6cdd0a589a62ce24e26144b7b2e62ff296994cbd1fbbf210018e7356467e28179dc110e07303de32b540cb8baa

  • SSDEEP

    768:4Poj3+zhlHL87mQT/fY2rnjxViCcMLk9k7aXBcrs6RZ0rMSoC+9H43:4PdzhlHg7mQTJXxkXBL6PgoC+l43

Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\ad5530c7fb5117154d563918e4e058f6_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\ad5530c7fb5117154d563918e4e058f6_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1168

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1168-0-0x0000000000400000-0x0000000000414000-memory.dmp

    Filesize

    80KB

  • memory/1168-1-0x0000000000400000-0x0000000000414000-memory.dmp

    Filesize

    80KB