Analysis

  • max time kernel
    93s
  • max time network
    122s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/09/2024, 22:01

General

  • Target

    d2ecda98abd6d86ce767321fbef54fc1_JaffaCakes118.exe

  • Size

    210KB

  • MD5

    d2ecda98abd6d86ce767321fbef54fc1

  • SHA1

    3305f3e50fef261c3865760c2ea798cf2bf80b94

  • SHA256

    52002775b1bd09b9f8fc2fb3fb7e6e5f4df328b9213758a6ed8017d77e605a76

  • SHA512

    1f03e3f6813a3aa5f7cdd775107b45e711eb5a9b96c4803d28a6ae09ab9eb424ff8ebbfe982d3f46d3e013ceb002eb742242ad3a0bdb728da5d541c5798272b7

  • SSDEEP

    6144:S+K7l5WMyJAnVW5GJZ2tNYLj8Mfswp+b9Y89hHlr:FK7l5WQVzYKj86sC81

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies registry class 3 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d2ecda98abd6d86ce767321fbef54fc1_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\d2ecda98abd6d86ce767321fbef54fc1_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:2204

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2204-0-0x0000000000400000-0x000000000048F000-memory.dmp

    Filesize

    572KB

  • memory/2204-1-0x00000000023F0000-0x00000000023F1000-memory.dmp

    Filesize

    4KB

  • memory/2204-6-0x00000000023F0000-0x00000000023F4000-memory.dmp

    Filesize

    16KB

  • memory/2204-9-0x0000000002450000-0x0000000002451000-memory.dmp

    Filesize

    4KB

  • memory/2204-8-0x0000000002440000-0x0000000002441000-memory.dmp

    Filesize

    4KB

  • memory/2204-21-0x0000000002440000-0x0000000002441000-memory.dmp

    Filesize

    4KB

  • memory/2204-19-0x0000000002450000-0x0000000002451000-memory.dmp

    Filesize

    4KB

  • memory/2204-23-0x0000000002440000-0x0000000002441000-memory.dmp

    Filesize

    4KB

  • memory/2204-22-0x0000000002440000-0x0000000002441000-memory.dmp

    Filesize

    4KB

  • memory/2204-20-0x0000000002450000-0x0000000002451000-memory.dmp

    Filesize

    4KB

  • memory/2204-18-0x0000000002450000-0x0000000002451000-memory.dmp

    Filesize

    4KB

  • memory/2204-17-0x0000000002450000-0x0000000002451000-memory.dmp

    Filesize

    4KB

  • memory/2204-16-0x0000000002450000-0x0000000002451000-memory.dmp

    Filesize

    4KB

  • memory/2204-15-0x0000000002450000-0x0000000002451000-memory.dmp

    Filesize

    4KB

  • memory/2204-14-0x0000000002450000-0x0000000002451000-memory.dmp

    Filesize

    4KB

  • memory/2204-13-0x0000000002450000-0x0000000002451000-memory.dmp

    Filesize

    4KB

  • memory/2204-12-0x0000000002450000-0x0000000002451000-memory.dmp

    Filesize

    4KB

  • memory/2204-11-0x0000000002450000-0x0000000002451000-memory.dmp

    Filesize

    4KB

  • memory/2204-10-0x0000000002450000-0x0000000002451000-memory.dmp

    Filesize

    4KB

  • memory/2204-7-0x0000000002440000-0x0000000002441000-memory.dmp

    Filesize

    4KB

  • memory/2204-5-0x0000000002400000-0x0000000002401000-memory.dmp

    Filesize

    4KB

  • memory/2204-4-0x0000000002400000-0x0000000002401000-memory.dmp

    Filesize

    4KB

  • memory/2204-3-0x0000000002400000-0x0000000002401000-memory.dmp

    Filesize

    4KB

  • memory/2204-2-0x0000000002400000-0x0000000002401000-memory.dmp

    Filesize

    4KB

  • memory/2204-25-0x00000000023E0000-0x00000000023E1000-memory.dmp

    Filesize

    4KB

  • memory/2204-45-0x0000000002450000-0x0000000002451000-memory.dmp

    Filesize

    4KB

  • memory/2204-44-0x0000000002450000-0x0000000002451000-memory.dmp

    Filesize

    4KB

  • memory/2204-43-0x0000000002450000-0x0000000002451000-memory.dmp

    Filesize

    4KB

  • memory/2204-42-0x0000000002450000-0x0000000002451000-memory.dmp

    Filesize

    4KB

  • memory/2204-41-0x0000000002450000-0x0000000002451000-memory.dmp

    Filesize

    4KB

  • memory/2204-40-0x0000000002450000-0x0000000002451000-memory.dmp

    Filesize

    4KB

  • memory/2204-39-0x0000000002450000-0x0000000002451000-memory.dmp

    Filesize

    4KB

  • memory/2204-38-0x0000000002450000-0x0000000002451000-memory.dmp

    Filesize

    4KB

  • memory/2204-37-0x0000000002450000-0x0000000002451000-memory.dmp

    Filesize

    4KB

  • memory/2204-36-0x0000000002450000-0x0000000002451000-memory.dmp

    Filesize

    4KB

  • memory/2204-35-0x0000000002450000-0x0000000002451000-memory.dmp

    Filesize

    4KB

  • memory/2204-34-0x0000000002440000-0x0000000002441000-memory.dmp

    Filesize

    4KB

  • memory/2204-33-0x00000000023F0000-0x00000000023F1000-memory.dmp

    Filesize

    4KB

  • memory/2204-32-0x0000000002430000-0x0000000002431000-memory.dmp

    Filesize

    4KB

  • memory/2204-31-0x0000000002420000-0x0000000002421000-memory.dmp

    Filesize

    4KB

  • memory/2204-30-0x0000000002410000-0x0000000002411000-memory.dmp

    Filesize

    4KB

  • memory/2204-29-0x00000000021F0000-0x00000000021F1000-memory.dmp

    Filesize

    4KB

  • memory/2204-28-0x00000000021E0000-0x00000000021E1000-memory.dmp

    Filesize

    4KB

  • memory/2204-27-0x0000000000400000-0x000000000048F000-memory.dmp

    Filesize

    572KB

  • memory/2204-46-0x0000000000400000-0x000000000048F000-memory.dmp

    Filesize

    572KB

  • memory/2204-47-0x0000000000400000-0x000000000048F000-memory.dmp

    Filesize

    572KB