Analysis
- max time kernel
14s - max time network
18s - platform
windows7_x64 - resource
win7-20240704-en - resource tags
- submitted
29/08/2024, 04:17
General
- Target c8369302447663994f8a624f6e37d440_JaffaCakes118.exe
- Size 187KB
- Sample240829-ewtchatbpd
- SHA256 1a6cda06edf1eb65697a86c2042455afae400c76a6dc8e2af28fff4667b7584b
Score
7/10
Malware Config
Signatures
- UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\c8369302447663994f8a624f6e37d440_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\c8369302447663994f8a624f6e37d440_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1848-0-0x0000000000400000-0x0000000000462000-memory.dmp
memory/1848-2-0x0000000000400000-0x0000000000462000-memory.dmp