Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14-09-2024 08:28

General

  • Target

    dfd1e1df826c26781b13504c98d9d1fd_JaffaCakes118.exe

  • Size

    883KB

  • MD5

    dfd1e1df826c26781b13504c98d9d1fd

  • SHA1

    5e69e3383a372980ea98f5bcb6d3afd1ff8fb240

  • SHA256

    140f760102c6daa2893bbcc122960de7a2b7dc8315134bad94a5ff3736d80457

  • SHA512

    3fc1a095237f1fb85a70ee747d71ce893fab1e621cfda540f6740b011d575fb15163e2c18628f99b8e026382811caf74eb68fcf0488f571ede927e35f1cc11bd

  • SSDEEP

    12288:ZQwOWydtOJRpKogpYzSGc22Hra6hoNRZ0Lg77Re82H7nkJqr+yz1CscXS626:ZjysE/q1crLa6hoNXLunkJ8RYsQ26

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\dfd1e1df826c26781b13504c98d9d1fd_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\dfd1e1df826c26781b13504c98d9d1fd_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2104

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2104-0-0x0000000000400000-0x00000000005DA000-memory.dmp

    Filesize

    1.9MB

  • memory/2104-1-0x00000000001A0000-0x00000000001A2000-memory.dmp

    Filesize

    8KB

  • memory/2104-3-0x00000000001A0000-0x00000000001A2000-memory.dmp

    Filesize

    8KB

  • memory/2104-2-0x0000000000400000-0x00000000005DA000-memory.dmp

    Filesize

    1.9MB

  • memory/2104-4-0x0000000000400000-0x00000000005DA000-memory.dmp

    Filesize

    1.9MB

  • memory/2104-5-0x0000000000400000-0x00000000005DA000-memory.dmp

    Filesize

    1.9MB

  • memory/2104-6-0x0000000000400000-0x00000000005DA000-memory.dmp

    Filesize

    1.9MB

  • memory/2104-7-0x0000000000400000-0x00000000005DA000-memory.dmp

    Filesize

    1.9MB

  • memory/2104-8-0x0000000000400000-0x00000000005DA000-memory.dmp

    Filesize

    1.9MB

  • memory/2104-9-0x0000000000400000-0x00000000005DA000-memory.dmp

    Filesize

    1.9MB

  • memory/2104-10-0x0000000000400000-0x00000000005DA000-memory.dmp

    Filesize

    1.9MB

  • memory/2104-11-0x0000000000400000-0x00000000005DA000-memory.dmp

    Filesize

    1.9MB

  • memory/2104-12-0x0000000000400000-0x00000000005DA000-memory.dmp

    Filesize

    1.9MB

  • memory/2104-13-0x0000000000400000-0x00000000005DA000-memory.dmp

    Filesize

    1.9MB

  • memory/2104-14-0x0000000000400000-0x00000000005DA000-memory.dmp

    Filesize

    1.9MB

  • memory/2104-15-0x0000000000400000-0x00000000005DA000-memory.dmp

    Filesize

    1.9MB

  • memory/2104-16-0x0000000000400000-0x00000000005DA000-memory.dmp

    Filesize

    1.9MB

  • memory/2104-17-0x0000000000400000-0x00000000005DA000-memory.dmp

    Filesize

    1.9MB