Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    29/08/2024, 19:55

General

  • Target

    c986293b6856e0aa40ac61e7bf435689_JaffaCakes118.exe

  • Size

    562KB

  • MD5

    c986293b6856e0aa40ac61e7bf435689

  • SHA1

    64480a751cafec4617526885f2e567fe2a4bff64

  • SHA256

    213631c392e3e213eb617fb891cf87531bbca107370df1070b4a51ac2f6b50ac

  • SHA512

    5f2461abbdb0aedac103dac57883d116cce93b65caa60dc439353947a7e9c1f52b73d189684afc779fbb1f13d5b139a9e049e4f80157624e1bf10ce0fdb41ccd

  • SSDEEP

    12288:NlmtMo0Bz9iY8VWRCeZuvW+x9oLuf1J+5QMRblpD5ohXu:zo0BKWRCyL+x9oKf1JqQMJlpD2u

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\c986293b6856e0aa40ac61e7bf435689_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\c986293b6856e0aa40ac61e7bf435689_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2204

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads