Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    12-09-2024 22:34

General

  • Target

    dd2ae3e750568f295eba3c4a4176b21a_JaffaCakes118.exe

  • Size

    64KB

  • MD5

    dd2ae3e750568f295eba3c4a4176b21a

  • SHA1

    6f02e9edbe7e8cc13c57133b048b5d63966c3004

  • SHA256

    203308d472a381f68c3851fcccf468d735d1690613d0e32e78b7fb74c39d5128

  • SHA512

    7eeea22645ca323f7f11492b9cedce229ed3a875cc20c2bb9de94967d74287f62a0ab6925a31f48a3a0c6b22a8509a691a8cd4c7fe65d0bc0d679dd0e4bccfa5

  • SSDEEP

    1536:ALXB65939tY6HBg4sXJag6eDt01EZC2xGQgc:ALk395hYXJag6e5gEZDQQgc

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\dd2ae3e750568f295eba3c4a4176b21a_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\dd2ae3e750568f295eba3c4a4176b21a_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2224

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads