Overview

overview

3

Static

static

3

aff96d72d3...18.exe

windows7-x64

1

aff96d72d3...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    135s
  • max time network
    126s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20-08-2024 16:31

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    aff96d72d3bc5e1689d676fa5e2f97a9_JaffaCakes118.exe

  • Size

    56KB

  • MD5

    aff96d72d3bc5e1689d676fa5e2f97a9

  • SHA1

    5ffef2b9af64d89b227f39f7d143fa6a5a116145

  • SHA256

    72f81c8a818e277e2bb8ecbddd3529b85803b93df500a9bce8afaed3551c9e3e

  • SHA512

    4d030068c07241c90f9d8d1f8a64d15df34f5f45efd403bdab0bce781707c526d1f76315999c777ef5f32ff3a214f56e81ac082e411eda0223c992328208d385

  • SSDEEP

    768:IsJ3egP1nHyetsbFXl681E8l1mNeagyL2z1ZPzlL8RMHQtePIjUknPOFh60bCj2Q:9J1PpSeel6TNNilzXzSyQGb60ba

Score
3/10
discovery

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\aff96d72d3bc5e1689d676fa5e2f97a9_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\aff96d72d3bc5e1689d676fa5e2f97a9_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3292

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3292-0-0x0000000000400000-0x000000000041F000-memory.dmp

    Filesize

    124KB

    Download

  • memory/3292-1-0x0000000000400000-0x000000000041F000-memory.dmp

    Filesize

    124KB

    Download