Analysis

  • max time kernel
    123s
  • max time network
    136s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/08/2024, 20:47

General

  • Target

    bf60015d492ecc18ff0ded74a91843f8_JaffaCakes118.exe

  • Size

    9KB

  • MD5

    bf60015d492ecc18ff0ded74a91843f8

  • SHA1

    a350b6883e79129722cb2c2ab90911ec3f1e6dfe

  • SHA256

    835cfd1b91fc21f008364a93b7bd00a0d8250546cf7b897508df92ca5b3e1b23

  • SHA512

    0ba3c833483eb07610b67cf622253ddd54100867cdbdb4d9dffb886a8bc38869a20bb74be0e897ce3b6ee0f56c3456bac27c0c5ee76a07e9ef73f3d438f47ec0

  • SSDEEP

    192:RMOOmUZSHNgFIXsP18touF3lcfFf5yqGhHLSX9QF:xjmFis9QlcffyqaeK

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\bf60015d492ecc18ff0ded74a91843f8_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\bf60015d492ecc18ff0ded74a91843f8_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:5084

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/5084-0-0x0000000000400000-0x0000000000405000-memory.dmp

    Filesize

    20KB

  • memory/5084-1-0x0000000000400000-0x0000000000405000-memory.dmp

    Filesize

    20KB