Overview

overview

3

Static

static

3

bf2827ad82...18.exe

windows7-x64

3

bf2827ad82...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    134s
  • max time network
    126s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/08/2024, 17:57

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    bf2827ad824c665d2ac19f997018680a_JaffaCakes118.exe

  • Size

    18KB

  • MD5

    bf2827ad824c665d2ac19f997018680a

  • SHA1

    66e3cfc13c4c1df9a82dc6450ca63ffa80a20ad8

  • SHA256

    77afff7109f349359fb43c2f6cc1733152f3ed5b9072fb4d0fff0b741c6d52f5

  • SHA512

    3fb2d9e0375072995f86c70e5f5a1ac6ac908a3661e9f7da2bb44afa31fd3f45e5ba84276ee9b8770b18d2280ea9ac12142a29e3ef520ed1b5060800ed6d4890

  • SSDEEP

    384:bqG+EtZ0c79Qnx8cA/boCIXF+zlfWKc7FAMofNKKDa/y20:Pjl2x8TTRI1+pfWKs1aA/M

Score
3/10
discovery

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\bf2827ad824c665d2ac19f997018680a_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\bf2827ad824c665d2ac19f997018680a_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:4880

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4880-0-0x0000000000400000-0x00000000004064D4-memory.dmp

          Filesize

          25KB

          Download

        • memory/4880-1-0x0000000000400000-0x00000000004064D4-memory.dmp

          Filesize

          25KB

          Download