Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    24-08-2024 18:17

General

  • Target

    bf2fc1632c69ccf25e0b2dc8391f8a2b_JaffaCakes118.exe

  • Size

    104KB

  • MD5

    bf2fc1632c69ccf25e0b2dc8391f8a2b

  • SHA1

    772077adefaf2c936fe0efd269e3b47e703e6046

  • SHA256

    b90d3556fc164043702aa9a9e493127f91678ce1addc4cfa1d4d00a9072cc399

  • SHA512

    d1f60bc0dd5ae5d8aac86b20b9fa1ab6aab7a726d62cb9970e7c2cfa15a73606dfcaa3d549bc99df418cd8d9355225b45f8ecf4ba4d04c54c7dd0ed4c5b2e766

  • SSDEEP

    3072:ajJ+0zD7zguW6CIyaJELkuhSUMkWIlhs7:QBrF/8tLkJa7l+7

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\bf2fc1632c69ccf25e0b2dc8391f8a2b_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\bf2fc1632c69ccf25e0b2dc8391f8a2b_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:624

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/624-0-0x0000000000400000-0x0000000000481000-memory.dmp

    Filesize

    516KB

  • memory/624-1-0x0000000000400000-0x0000000000481000-memory.dmp

    Filesize

    516KB