Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/09/2024, 03:18

General

  • Target

    dd901cefa51101050e4d72fcb53119cd_JaffaCakes118.exe

  • Size

    600KB

  • MD5

    dd901cefa51101050e4d72fcb53119cd

  • SHA1

    267c4a29f0d353a73923fefd899807577ffdf672

  • SHA256

    149110d2b841cd2a0b4e98c2074853f628b29472be94d4c779c60c90358ba026

  • SHA512

    969dad197067fd4ec88410212962e5ca43fc1dc4a53c1791bcbd8f62fec4db5446defa66757284d1c7d6b550b6239d7b5d339765c4be08e8f51a92b0a1ee7bea

  • SSDEEP

    6144:k7krfh/qRW0rco/iwfM75a/guORRI+itDDSLi:prfhyRVgyiwfsNgC

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\dd901cefa51101050e4d72fcb53119cd_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\dd901cefa51101050e4d72fcb53119cd_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1220

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1220-0-0x0000000000400000-0x000000000049B000-memory.dmp

          Filesize

          620KB

        • memory/1220-1-0x0000000000400000-0x000000000049B000-memory.dmp

          Filesize

          620KB