Analysis

  • max time kernel
    140s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/09/2024, 07:54

General

  • Target

    d3e3f34e4455dceff4e6b308acdf8ff4_JaffaCakes118.exe

  • Size

    1.3MB

  • MD5

    d3e3f34e4455dceff4e6b308acdf8ff4

  • SHA1

    6a4e6fd1e8383087a23925402e973628bf0381b2

  • SHA256

    c84031d3ff44244018e67f7848a07133bb3ae6b7efd7665ad01cd9c6909a80b2

  • SHA512

    85263d6000660915fc1b10fb30e6edbffa4f4d80e4475cf381384d6ea2d1c8958edd89c5541ba4563ea1da78fd242f1e42925fc55b244ad16701dd9feef49d1f

  • SSDEEP

    24576:W9Um55eZ2rXEyp76BZePSHCcA6tNkg3vyOYhCS0PUEzCAW5eNf4W7S9o7W3brYcl:L65eZUUhe7cDhUhOzs5eNtd6r/pilK

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\d3e3f34e4455dceff4e6b308acdf8ff4_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\d3e3f34e4455dceff4e6b308acdf8ff4_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:736

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/736-0-0x0000000000400000-0x0000000000573000-memory.dmp

    Filesize

    1.4MB

  • memory/736-1-0x0000000000400000-0x0000000000573000-memory.dmp

    Filesize

    1.4MB