Overview

overview

3

Static

static

3

d0f32e5e98...18.exe

windows7-x64

1

d0f32e5e98...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/09/2024, 03:08

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    d0f32e5e98e7e3f27bb3c0c8e63c0b90_JaffaCakes118.exe

  • Size

    57KB

  • MD5

    d0f32e5e98e7e3f27bb3c0c8e63c0b90

  • SHA1

    f06086852c0dc96ddc62fa204ca88e983450ad96

  • SHA256

    a6646a0ece6aedc41041b4dd64bafee5011786ab728d4840075a136b340e408a

  • SHA512

    64bc8fd66800e842328a6812d76cb9a22af72587ddc6d97c1cd5f6d0ccb2cd6af7daf11f1385a79e67faa273cbc41ff3fb08f491efe71d4bed763b6c92410e93

  • SSDEEP

    1536:0QFeA65V6qWR0AMIAoUR+e3KOX4CflF+ccFBRv:0vHr6n0Z/3ToCflF+JFHv

Score
3/10
discovery

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\d0f32e5e98e7e3f27bb3c0c8e63c0b90_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\d0f32e5e98e7e3f27bb3c0c8e63c0b90_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2372

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2372-0-0x0000000000F10000-0x0000000000F36000-memory.dmp

          Filesize

          152KB

          Download

        • memory/2372-1-0x0000000000F10000-0x0000000000F36000-memory.dmp

          Filesize

          152KB

          Download