Analysis

  • max time kernel
    148s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/09/2024, 06:22

General

  • Target

    dfa51d98a9f794d3d3ce619016797200_JaffaCakes118.exe

  • Size

    75KB

  • MD5

    dfa51d98a9f794d3d3ce619016797200

  • SHA1

    8d480b99cf987692a93927db76019a94621bdf53

  • SHA256

    d1f2debda3773f04e88b865585b12145059d885d741647386859197c50944d4a

  • SHA512

    37f474301161656d0ce9a69edc6d07d0795ac396b8b0669a4ce5c9b3b8a17e674c09d2324532a477abeb7f83047912924468117da7cb9f203b53fba81126a3ac

  • SSDEEP

    1536:U42cPHBg5mVXkJzw/Z4RoRBBkAPqYzw8nFaaXqZ5ZgDy:U42U65mXkJzU4ikH1OTXqT

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\dfa51d98a9f794d3d3ce619016797200_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\dfa51d98a9f794d3d3ce619016797200_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1216

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads