Analysis

  • max time kernel
    133s
  • max time network
    101s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/08/2024, 16:30

General

  • Target

    bc7befd3abc411761dd546d8163f1047_JaffaCakes118.exe

  • Size

    209KB

  • MD5

    bc7befd3abc411761dd546d8163f1047

  • SHA1

    0d6505dc10ad0c697cd97e90a91a9e1e4bfbf2a1

  • SHA256

    e2164e5cdb181f10a4da154c07073dcc67afe37a2aa068eb11838673448e0e79

  • SHA512

    516cf5711d512fca245a315e6e48041f3ba9ef6521b6faf431492025776e0eef8a4c76660f238db24fdf74959d5c8e23885ac8b36c9294c41cc8225882d12f9f

  • SSDEEP

    6144:1V9LizuyphibKPLOT5ZzMzunZp71usrCKcAO:czuyphiGPLCZ/71u8CsO

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\bc7befd3abc411761dd546d8163f1047_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\bc7befd3abc411761dd546d8163f1047_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:536

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/536-0-0x0000000000400000-0x0000000000416000-memory.dmp

    Filesize

    88KB

  • memory/536-4-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

    Filesize

    368KB

  • memory/536-1-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

    Filesize

    368KB

  • memory/536-2-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

    Filesize

    368KB

  • memory/536-3-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

    Filesize

    368KB

  • memory/536-6-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

    Filesize

    368KB

  • memory/536-5-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

    Filesize

    368KB

  • memory/536-8-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

    Filesize

    368KB

  • memory/536-9-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

    Filesize

    368KB

  • memory/536-7-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

    Filesize

    368KB

  • memory/536-13-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

    Filesize

    368KB

  • memory/536-12-0x0000000000400000-0x0000000000416000-memory.dmp

    Filesize

    88KB

  • memory/536-10-0x0000000000400000-0x0000000000416000-memory.dmp

    Filesize

    88KB