Analysis

  • max time kernel
    94s
  • max time network
    118s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07-09-2024 19:13

General

  • Target

    d2a64ff252114209a4e3e7ebdfb92229_JaffaCakes118.exe

  • Size

    156KB

  • MD5

    d2a64ff252114209a4e3e7ebdfb92229

  • SHA1

    89d3cc78872a479eb7c6279226e65fc4184a570d

  • SHA256

    366caaf79c4c67d100884b9b4acee1bc63e786527b751d1bcf5ed7af9b79bd0c

  • SHA512

    02e5339f869f2f5528e6295976bcbef7a67348472e3617bb53a11c398eea32e95444710589d01d8b4f6e5909bcaf24914642bcdf489fadbbaf0ee1919f804f9a

  • SSDEEP

    3072:1MtbriFi3h1zaqi3uO/hQJ7PyHd+/5U7Uy8O:X03hxNkuEhQJ7yU/5i

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\d2a64ff252114209a4e3e7ebdfb92229_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\d2a64ff252114209a4e3e7ebdfb92229_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3444

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3444-0-0x0000000000400000-0x0000000000427000-memory.dmp

    Filesize

    156KB

  • memory/3444-1-0x0000000000400000-0x0000000000427000-memory.dmp

    Filesize

    156KB