Analysis

  • max time kernel
    141s
  • max time network
    126s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21-08-2024 00:36

General

  • Target

    b17ce1c4c72c2b36a94942c32d50333d_JaffaCakes118.exe

  • Size

    512KB

  • MD5

    b17ce1c4c72c2b36a94942c32d50333d

  • SHA1

    0af9719c42ee9bc6fea3dc21be60d6a245a7d383

  • SHA256

    6e86a28be3d839d3aa6f57700cc120b3d71614f113c219e766cf214491e678f4

  • SHA512

    017277d28bcaa9f0e92d0e4007f6e6349bb64c7d17c089e8f76624101f96310367b413a54d4f0b0615ffc0e988c7ef31c041a32673e6ffe1e2fa96bc7c749737

  • SSDEEP

    3072:naR6EsiAjZuzzBjk5u25GKNnZyhjU+gMg6nO2s:i6E1Ymzq5GKNoo+gr

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\b17ce1c4c72c2b36a94942c32d50333d_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\b17ce1c4c72c2b36a94942c32d50333d_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:4660

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4660-0-0x00000000005A0000-0x00000000005C0000-memory.dmp

    Filesize

    128KB

  • memory/4660-1-0x0000000013140000-0x0000000013160000-memory.dmp

    Filesize

    128KB