Analysis

  • max time kernel
    134s
  • max time network
    102s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/08/2024, 03:33

General

  • Target

    c23328a28c9e00ace7bc0fedceeb1b91_JaffaCakes118.exe

  • Size

    121KB

  • MD5

    c23328a28c9e00ace7bc0fedceeb1b91

  • SHA1

    6791970da2afef0d240894e7f1220834b261e727

  • SHA256

    ee2d8cef40fd76fb1404f83257306579d930e99dcba8703bfc5ee90184d1ca0b

  • SHA512

    3dc05559df9207ca687af3a0516fd542cdc99fb6b1ba6a3ccbce3d319c395887bac20d0d3dfb715afd2cea8e5bba4538de0111fcf14ee7dfbf6eb5925a3c1794

  • SSDEEP

    1536:SroOYITCroFwiXZkAUtOoslouJ1gJcxWGd+oryMm+H8JUg3hG3Yxo:SroO5XvUtDslofOWGd2Mm+H8JUgRGv

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\c23328a28c9e00ace7bc0fedceeb1b91_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\c23328a28c9e00ace7bc0fedceeb1b91_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3352

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3352-0-0x0000000010000000-0x000000001000E000-memory.dmp

    Filesize

    56KB

  • memory/3352-4-0x0000000000400000-0x0000000000423000-memory.dmp

    Filesize

    140KB