Analysis

  • max time kernel
    140s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09-09-2024 16:43

General

  • Target

    d6b7b1643eca3a3eeef7ba6fab3cec88_JaffaCakes118.exe

  • Size

    164KB

  • MD5

    d6b7b1643eca3a3eeef7ba6fab3cec88

  • SHA1

    c79d588a29bc05875a18ba4f470aee932d39c0ca

  • SHA256

    81f73b26f2999217315f9e7a87932c7902ceb98f33ecdd128d9e2dd7c4d5020a

  • SHA512

    0d0311acb85c652a717872cd6947c9a3fc1dea6422724650c0b505ab4cb903c27d715b6fb6571d7e863b19847d04a1a7e8abc9e3bfc3ad08b1405feb17a8d94b

  • SSDEEP

    3072:dRc/qqsbHMQH+dEpYt96HM0XnpvTyQvGn+nCuhTr8npE3dvvq9aGNLlccVwGn5JN:DDqsYu6RR4TyQOI5JgpcvqNplcun5r

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\d6b7b1643eca3a3eeef7ba6fab3cec88_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\d6b7b1643eca3a3eeef7ba6fab3cec88_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3980

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3980-0-0x0000000000400000-0x0000000000479000-memory.dmp

    Filesize

    484KB

  • memory/3980-1-0x0000000000400000-0x0000000000479000-memory.dmp

    Filesize

    484KB