Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/08/2024, 10:04

General

  • Target

    b7374b16549cb24de846ed720fd9629a_JaffaCakes118.exe

  • Size

    610KB

  • MD5

    b7374b16549cb24de846ed720fd9629a

  • SHA1

    18fde8f79c4fb6c2824a1898458f53fd7ff1624d

  • SHA256

    0479c0bfdf2d3fcfb8f1ee4253f932e4124328454528195be957eee7ce3186f5

  • SHA512

    e01faebefe6bfbd7c9f4175cf8eab59b1bce71e85500382e7abbb62cdaee455599f2fa2b8b2910b2eec0c72b9cea0fb0cc6851d0b404512d16871153ad7f7e95

  • SSDEEP

    12288:74ypNPM08k4Jkc6M60CY13Ibnn1nnn6K/q6xGJOpqT3SC6t6LhkGRVt4S3:88PM08vJUMp3NKy0Gkpl6CwVtx

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b7374b16549cb24de846ed720fd9629a_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\b7374b16549cb24de846ed720fd9629a_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:3432

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3432-0-0x0000000000400000-0x00000000004FE000-memory.dmp

    Filesize

    1016KB

  • memory/3432-1-0x0000000002AB0000-0x0000000002B0A000-memory.dmp

    Filesize

    360KB

  • memory/3432-2-0x0000000000820000-0x0000000000821000-memory.dmp

    Filesize

    4KB

  • memory/3432-3-0x0000000000870000-0x0000000000871000-memory.dmp

    Filesize

    4KB

  • memory/3432-47-0x0000000003A80000-0x0000000003A81000-memory.dmp

    Filesize

    4KB

  • memory/3432-55-0x0000000003A80000-0x0000000003A81000-memory.dmp

    Filesize

    4KB

  • memory/3432-54-0x0000000003A80000-0x0000000003A81000-memory.dmp

    Filesize

    4KB

  • memory/3432-53-0x0000000003A80000-0x0000000003A81000-memory.dmp

    Filesize

    4KB

  • memory/3432-52-0x0000000003A80000-0x0000000003A81000-memory.dmp

    Filesize

    4KB

  • memory/3432-51-0x0000000003A80000-0x0000000003A81000-memory.dmp

    Filesize

    4KB

  • memory/3432-50-0x0000000003A80000-0x0000000003A81000-memory.dmp

    Filesize

    4KB

  • memory/3432-49-0x0000000003A80000-0x0000000003A81000-memory.dmp

    Filesize

    4KB

  • memory/3432-48-0x0000000003A80000-0x0000000003A81000-memory.dmp

    Filesize

    4KB

  • memory/3432-46-0x0000000002C50000-0x0000000002C51000-memory.dmp

    Filesize

    4KB

  • memory/3432-45-0x0000000003A80000-0x0000000003A81000-memory.dmp

    Filesize

    4KB

  • memory/3432-44-0x0000000003A90000-0x0000000003A91000-memory.dmp

    Filesize

    4KB

  • memory/3432-43-0x0000000003A90000-0x0000000003A91000-memory.dmp

    Filesize

    4KB

  • memory/3432-42-0x0000000003A90000-0x0000000003A91000-memory.dmp

    Filesize

    4KB

  • memory/3432-41-0x0000000003A90000-0x0000000003A91000-memory.dmp

    Filesize

    4KB

  • memory/3432-40-0x0000000003A90000-0x0000000003A91000-memory.dmp

    Filesize

    4KB

  • memory/3432-39-0x0000000002CE0000-0x0000000002CE1000-memory.dmp

    Filesize

    4KB

  • memory/3432-38-0x0000000003A90000-0x0000000003A91000-memory.dmp

    Filesize

    4KB

  • memory/3432-37-0x0000000002CB0000-0x0000000002CB1000-memory.dmp

    Filesize

    4KB

  • memory/3432-36-0x0000000002CA0000-0x0000000002CA1000-memory.dmp

    Filesize

    4KB

  • memory/3432-35-0x0000000002CF0000-0x0000000002CF1000-memory.dmp

    Filesize

    4KB

  • memory/3432-34-0x0000000002CD0000-0x0000000002CD1000-memory.dmp

    Filesize

    4KB

  • memory/3432-33-0x0000000003A80000-0x0000000003A81000-memory.dmp

    Filesize

    4KB

  • memory/3432-32-0x00000000008C0000-0x00000000008C1000-memory.dmp

    Filesize

    4KB

  • memory/3432-31-0x0000000002C40000-0x0000000002C41000-memory.dmp

    Filesize

    4KB

  • memory/3432-30-0x0000000002C80000-0x0000000002C81000-memory.dmp

    Filesize

    4KB

  • memory/3432-29-0x0000000002C60000-0x0000000002C61000-memory.dmp

    Filesize

    4KB

  • memory/3432-28-0x0000000002C70000-0x0000000002C71000-memory.dmp

    Filesize

    4KB

  • memory/3432-27-0x0000000002C20000-0x0000000002C21000-memory.dmp

    Filesize

    4KB

  • memory/3432-26-0x0000000003A80000-0x0000000003A81000-memory.dmp

    Filesize

    4KB

  • memory/3432-25-0x0000000003A80000-0x0000000003A81000-memory.dmp

    Filesize

    4KB

  • memory/3432-24-0x0000000003A80000-0x0000000003A81000-memory.dmp

    Filesize

    4KB

  • memory/3432-23-0x0000000003A80000-0x0000000003A81000-memory.dmp

    Filesize

    4KB

  • memory/3432-22-0x0000000003A90000-0x0000000003A91000-memory.dmp

    Filesize

    4KB

  • memory/3432-21-0x0000000003A90000-0x0000000003A91000-memory.dmp

    Filesize

    4KB

  • memory/3432-20-0x0000000003A90000-0x0000000003A91000-memory.dmp

    Filesize

    4KB

  • memory/3432-19-0x0000000003A90000-0x0000000003A91000-memory.dmp

    Filesize

    4KB

  • memory/3432-18-0x0000000003A90000-0x0000000003A91000-memory.dmp

    Filesize

    4KB

  • memory/3432-17-0x0000000003A90000-0x0000000003A91000-memory.dmp

    Filesize

    4KB

  • memory/3432-16-0x0000000003A90000-0x0000000003A91000-memory.dmp

    Filesize

    4KB

  • memory/3432-15-0x0000000000830000-0x0000000000831000-memory.dmp

    Filesize

    4KB

  • memory/3432-14-0x0000000003A90000-0x0000000003A91000-memory.dmp

    Filesize

    4KB

  • memory/3432-13-0x0000000003A90000-0x0000000003A91000-memory.dmp

    Filesize

    4KB

  • memory/3432-12-0x0000000003A90000-0x0000000003A91000-memory.dmp

    Filesize

    4KB

  • memory/3432-11-0x0000000003A90000-0x0000000003A91000-memory.dmp

    Filesize

    4KB

  • memory/3432-10-0x0000000003A90000-0x0000000003A91000-memory.dmp

    Filesize

    4KB

  • memory/3432-9-0x0000000003A90000-0x0000000003A91000-memory.dmp

    Filesize

    4KB

  • memory/3432-56-0x0000000003A80000-0x0000000003A82000-memory.dmp

    Filesize

    8KB

  • memory/3432-8-0x00000000007F0000-0x00000000007F1000-memory.dmp

    Filesize

    4KB

  • memory/3432-7-0x0000000000880000-0x0000000000881000-memory.dmp

    Filesize

    4KB

  • memory/3432-6-0x00000000007E0000-0x00000000007E1000-memory.dmp

    Filesize

    4KB

  • memory/3432-5-0x0000000000840000-0x0000000000841000-memory.dmp

    Filesize

    4KB

  • memory/3432-4-0x0000000000860000-0x0000000000861000-memory.dmp

    Filesize

    4KB

  • memory/3432-60-0x00000000006B0000-0x00000000006B1000-memory.dmp

    Filesize

    4KB

  • memory/3432-61-0x00000000006C0000-0x00000000006C1000-memory.dmp

    Filesize

    4KB

  • memory/3432-62-0x0000000003AC0000-0x0000000003AC1000-memory.dmp

    Filesize

    4KB

  • memory/3432-59-0x0000000003A90000-0x0000000003A91000-memory.dmp

    Filesize

    4KB

  • memory/3432-63-0x0000000000400000-0x00000000004FE000-memory.dmp

    Filesize

    1016KB

  • memory/3432-65-0x0000000003AA0000-0x0000000003AA1000-memory.dmp

    Filesize

    4KB

  • memory/3432-64-0x0000000003AB0000-0x0000000003AB1000-memory.dmp

    Filesize

    4KB

  • memory/3432-66-0x0000000002AB0000-0x0000000002B0A000-memory.dmp

    Filesize

    360KB

  • memory/3432-72-0x0000000003A80000-0x0000000003A81000-memory.dmp

    Filesize

    4KB

  • memory/3432-73-0x0000000003AD0000-0x0000000003AD1000-memory.dmp

    Filesize

    4KB

  • memory/3432-74-0x0000000000400000-0x00000000004FE000-memory.dmp

    Filesize

    1016KB