Analysis

  • max time kernel
    149s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/09/2024, 19:54

General

  • Target

    db1d2d54f903b00006f00d3548509658_JaffaCakes118.exe

  • Size

    88KB

  • MD5

    db1d2d54f903b00006f00d3548509658

  • SHA1

    37428160d337e7a93553a3d39ea0b98cf50bae97

  • SHA256

    0a4263e65126c5cdcb0b2802f539980c5b24267af173b705c45265a65581098b

  • SHA512

    a72f0572f4c1f033c872d8c5065846b65fd14d80798e9d4afa0264fa21ec8b95be8e2ef87dc2cc334794d0a9d5eb84866be1e53e16125367576f014e14217fe1

  • SSDEEP

    1536:3GzzTHtRrg1yozXuu8uurnKuu8uuidjrmtWqemOoSHSd:3GDfgyozXuu8uumuu8uuiFrurexoAy

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\db1d2d54f903b00006f00d3548509658_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\db1d2d54f903b00006f00d3548509658_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:5012

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/5012-0-0x0000000000400000-0x0000000000417000-memory.dmp

    Filesize

    92KB

  • memory/5012-1-0x0000000000400000-0x0000000000417000-memory.dmp

    Filesize

    92KB