Analysis
-
max time kernel
149s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19/09/2024, 04:03
General
-
Target
ea8d7a17e521635b965a235388e52b09_JaffaCakes118.exe
-
Size
515KB
-
MD5
ea8d7a17e521635b965a235388e52b09
-
SHA1
f20d9245abae44a7a6fc1d193664fb673e88978c
-
SHA256
1c57b05fe4aa0f1ba969f19bf212400cfa517d0f70dc6b65b882f4243227c7e4
-
SHA512
f39001d7917e28a6d6657b241847800729af4a7d84570d99c6c36476416d394dbb1857b0325a1db5c8fa8352a6e57864af2ee753d6172fca6ea7c5243ccd2251
-
SSDEEP
12288:M5rxLpq60Ez+gx6kCm0hcDMdCKB1YeFf0DNJVa04G:MdxLE60EakCm0CDMd9Q14
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
-
Loads dropped DLL 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ea8d7a17e521635b965a235388e52b09_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ea8d7a17e521635b965a235388e52b09_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
492KB
MD53d601f6b7a9b7f704b0c883bdaa6a376
SHA128d2034d9917b0d46d2be6bb20498e36eea9b2d6
SHA25631ada490f5372e0e92bc268c339d3c599e8d7755967aed52fe6cb03eaf0f9022
SHA5120c2068057b22c22fc6008045a95d0b3c8a5b9804fabcf83420bab27d1256f386caa99d69f498e1eca451a1e907c601cf3035e87611acad98b569d6981504f162
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
4KB
-
Filesize
548KB
-
Filesize
1.4MB
-
Filesize
4KB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
548KB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB