Analysis

  • max time kernel
    94s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15-09-2024 05:52

General

  • Target

    e1d3cd9d96ccdad2b656af0698259a12_JaffaCakes118.exe

  • Size

    25KB

  • MD5

    e1d3cd9d96ccdad2b656af0698259a12

  • SHA1

    5a7c6ec6345650bdd081e58043cd0f3fa0011632

  • SHA256

    c06c018ba4db90f3971acc10074616f113c95ff9324bd823c239d2da67802336

  • SHA512

    56d9dfe4b12272588f5fe04e888b305116780d08acd71c39afb266f9eaf423ea7f6bc86953adcce39bf08aa8e9f809a5208d54022b38a42ad09f23febbb7dfe1

  • SSDEEP

    384:Zzq+ii0SZgp4r5RgPfPLQfnqr3L9qOZB1Z5Jl9l81KmBKDADq46Dk:ZzvR0SZgWteDQPqHdZBRJ6Um3Da

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\e1d3cd9d96ccdad2b656af0698259a12_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\e1d3cd9d96ccdad2b656af0698259a12_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3016

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3016-0-0x0000000000400000-0x0000000000415000-memory.dmp

    Filesize

    84KB

  • memory/3016-1-0x0000000000400000-0x0000000000415000-memory.dmp

    Filesize

    84KB