Analysis

  • max time kernel
    93s
  • max time network
    97s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06-09-2024 02:54

General

  • Target

    ce7bb38a896a204dc035f2bb8e5462a4_JaffaCakes118.exe

  • Size

    220KB

  • MD5

    ce7bb38a896a204dc035f2bb8e5462a4

  • SHA1

    0a90695462d36545745827d5d1604e1a5dc86eab

  • SHA256

    c98e88c68dee61db3de034682db6342795a12302e1ef472aff322ca3f2dc0cf1

  • SHA512

    beb373def82376cd2d49a1ce0594c006f9f350fe5b7434ed61ed5cf7c679bfd76ed256e8dea17174d7aa9f281a6a83a97908aa9b2124f7db163a15ff55d73a79

  • SSDEEP

    3072:IphqMuDoCd+IfuK5FAgwxkDyGCKR5NbyacLCMrK6HUAwrkokGdSTbbXcZ:qhGsCd/fuK4fxYCQ+LC0RoXdSXbG

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\ce7bb38a896a204dc035f2bb8e5462a4_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\ce7bb38a896a204dc035f2bb8e5462a4_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3968

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3968-0-0x0000000000400000-0x0000000000439000-memory.dmp

    Filesize

    228KB

  • memory/3968-1-0x0000000000400000-0x0000000000439000-memory.dmp

    Filesize

    228KB