Analysis

  • max time kernel
    132s
  • max time network
    103s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/08/2024, 21:12

General

  • Target

    b51086b8dece0852c327c86cdee0171e_JaffaCakes118.exe

  • Size

    587KB

  • MD5

    b51086b8dece0852c327c86cdee0171e

  • SHA1

    ef1364370ca98a47e6945c87a72840e161cdb46a

  • SHA256

    65a7250db77cd55ed44b3fdfa29f84a97109f4d9fad5f236cdc967c3cd075de9

  • SHA512

    b491aafa1cf84299d9ae2b353818d7852f6773d9c2f7529c6d14e9986ea84f3eb3381490eecd3c3734ee107036c35a683de96d75f8246061da96ea6edb44b4f6

  • SSDEEP

    12288:u5UDehRBVwZ28uUmL2fxPZGV88sMzUZaxSr7eqN3v4Th:u568R18uUmMLGTd8G6eqN3v4T

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\b51086b8dece0852c327c86cdee0171e_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\b51086b8dece0852c327c86cdee0171e_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2432

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2432-0-0x0000000002350000-0x0000000002351000-memory.dmp

          Filesize

          4KB

        • memory/2432-1-0x0000000000400000-0x0000000000499000-memory.dmp

          Filesize

          612KB