Analysis

  • max time kernel
    123s
  • max time network
    139s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15-09-2024 02:33

General

  • Target

    e188ac27e7511681bfa2cd4a4f48e8ff_JaffaCakes118.exe

  • Size

    241KB

  • MD5

    e188ac27e7511681bfa2cd4a4f48e8ff

  • SHA1

    0aae39b28ed88583b1b96dc68c6592aa9d3715ca

  • SHA256

    9d6437c7206c23c9614b3a324dafc9f4e78219f2412ad7bbc7ac682c34f8fe06

  • SHA512

    ad97641aec65bf3d0e747810279f2e3265449f787295dded7d24972eca756d6803d0931373eb1b44802ea30dd732245190ddb38803d87b6ab6faf17835619ccc

  • SSDEEP

    3072:nsD2ADkpFGkTXlDJA6ba2esDetNxVgbTGV9XT4BD1mi:nplzpTVDVa2en/V6MpT8J

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\e188ac27e7511681bfa2cd4a4f48e8ff_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\e188ac27e7511681bfa2cd4a4f48e8ff_JaffaCakes118.exe"
    1⤵
    • Adds Run key to start application
    • System Location Discovery: System Language Discovery
    PID:3200

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\G40JFEW9\tasks[1].htm

    Filesize

    2KB

    MD5

    fc6fe50e1610be084d1edfbbff4ec1ff

    SHA1

    50c2e9cb695f893a316c1d528f6968119684ec93

    SHA256

    bc2bd850837c6351411dbb6516802968f8d7d6f0e23e2cf5a298b55d135d2ab2

    SHA512

    3aecb0f061ea32cb100be1ad5264a3a6150c6b852750adb9e744d8344917981f06dc5a38513ba434c28c47da656e785050728534b78c4a32689e3872e88a76bf