Analysis

  • max time kernel
    140s
  • max time network
    138s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/08/2024, 01:00

General

  • Target

    c7f60cf80d41bac77c1078cc69139281_JaffaCakes118.exe

  • Size

    90KB

  • MD5

    c7f60cf80d41bac77c1078cc69139281

  • SHA1

    97750ced017fe3e7fa2c74683686d8663aa5037d

  • SHA256

    d03788f65605d828789e260da977face30247383f4055e06715d9958c1e2372e

  • SHA512

    b3263e92131beb5a49653cf913f52b52830b6beaf69d3190e1bed96290c143cedf712663e5f1b0d0ca879af5f5ec2dedda5e0bce52c879f960e78dcb624c314b

  • SSDEEP

    1536:U01KcO70s6fdLsq7vN/7W6jdJ1xQwnj5HjEp4uzBgroAxjNhrb9ANBGGhm:U01KcO70swdYIN/79dVQ+YuOBgrJxjN1

Score
7/10

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\c7f60cf80d41bac77c1078cc69139281_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\c7f60cf80d41bac77c1078cc69139281_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1064

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1064-0-0x0000000000400000-0x0000000000434000-memory.dmp

    Filesize

    208KB

  • memory/1064-2-0x0000000000400000-0x0000000000434000-memory.dmp

    Filesize

    208KB