Analysis
-
max time kernel
140s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
22/08/2024, 10:59
General
-
Target
b7609fdc2073551b8bb9f0b2de5ba411_JaffaCakes118.exe
-
Size
1.4MB
-
MD5
b7609fdc2073551b8bb9f0b2de5ba411
-
SHA1
34f1bd656ea0a5748923a784f77ec1f67850cb7a
-
SHA256
ddcdfb1ac4dec9b69fa7359b5059c9b4be091b6dd3b1dbaeb114786451db33bb
-
SHA512
d55c35282a5b847482234e4d5d1d170755b9a529932261dbe14f9e70297a6fcfb273c8430b261404dd16e9fb46f300292eee5a43a3c34cc19162edbefc7c517a
-
SSDEEP
24576:6v9aq99GdHbtsnvNzwnkzkNpcJomdKXnU5BJHJgbTKxkw3jj8l:g9a0G1tsnFUhJXnyVJgkl8
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\b7609fdc2073551b8bb9f0b2de5ba411_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b7609fdc2073551b8bb9f0b2de5ba411_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
98KB
MD5a468dd92dc57984ec6cf6cf96afafe4e
SHA16e675c7e2b736d51689d32a657684b3ef9883a8d
SHA256fe7bf5564228ae806002bccb63122fd81c27ecbcebfb061d7ff2dbd2ae5d5e4a
SHA512d849c8c2c9dd52a08ec761fb6a90e165935e5280b3cd1cb9a12700d42250a7a39ff00cdcb5cf124ac45be9853156ce5b38a5018f5fdb7a2dc6128003a22d9423
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
424KB
-
Filesize
424KB
-
Filesize
4KB
-
Filesize
8KB
-
Filesize
4KB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
8KB
-
Filesize
2.1MB
-
Filesize
424KB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
2.1MB