Analysis

  • max time kernel
    138s
  • max time network
    123s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/08/2024, 03:38

General

  • Target

    b633e303a8db246c513641e57047a2bf_JaffaCakes118.exe

  • Size

    434KB

  • MD5

    b633e303a8db246c513641e57047a2bf

  • SHA1

    bab6c7e0ff2d84bd1d43bbff8065cf05c6ef7921

  • SHA256

    87e0ce9990aabdcd7240c9b360db7b227b8133b4c4363ad7ff99178d160948ec

  • SHA512

    b9842e5addd6582cfb3e8e72a4b93f7abe98ff86241f3cc71d2a198dceaffcd91565ca5c47ccb584511e116d212c2df4582f25d68e1f7e89f2e2c01810e088b8

  • SSDEEP

    6144:HOw4OYCY6+EuqxV5FecvOZJkhult4nFmI2eEO5vUGY1Gc:uzCYDIVTe0OZ+Ult40dOZUG6

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\b633e303a8db246c513641e57047a2bf_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\b633e303a8db246c513641e57047a2bf_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:4104

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4104-0-0x0000000000400000-0x000000000049C000-memory.dmp

    Filesize

    624KB

  • memory/4104-1-0x0000000000400000-0x000000000049C000-memory.dmp

    Filesize

    624KB