Overview

overview

3

Static

static

3

b640009b35...18.exe

windows7-x64

3

b640009b35...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    141s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    22/08/2024, 03:57

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    b640009b359a57223fa661e5e0175cc8_JaffaCakes118.exe

  • Size

    416KB

  • MD5

    b640009b359a57223fa661e5e0175cc8

  • SHA1

    98ccd572186b6f1907df2b83e1b5d13584f8199c

  • SHA256

    d6bddbfa5b8ceabde4044e3e2a966aadd925de1b8477eb9c81b1d21b376a5421

  • SHA512

    c11ee2c4f9cdcdd435df7cd13add01beda49f1a76f99bc86a5f8f8e32cb902bee72f31ee989f13cc3ca2981bc27bcdaea559ccf686372b97815bfad17d164a6d

  • SSDEEP

    6144:2a64sLR0ia4EgAsnRTfs8foa8EY6/+xM4+Z/Zk0nv8qnIZeNij7dZRMAjJj6avPg:X6tLR0i4g1ndugN/nIZRVE+bU

Score
3/10
discovery

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\b640009b359a57223fa661e5e0175cc8_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\b640009b359a57223fa661e5e0175cc8_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1288

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1288-0-0x0000000000310000-0x0000000000311000-memory.dmp

          Filesize

          4KB

          Download

        • memory/1288-1-0x0000000000400000-0x000000000046F000-memory.dmp

          Filesize

          444KB

          Download