Analysis

  • max time kernel
    140s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    21/09/2024, 17:22

General

  • Target

    f0493978287dbcd67442c34a4eae6c24_JaffaCakes118.exe

  • Size

    278KB

  • MD5

    f0493978287dbcd67442c34a4eae6c24

  • SHA1

    0f665222b39b92170c7300003b7907e9ebb209ce

  • SHA256

    e3954754d658cf5d0840ef09c7c8b1cab7711c3dd57cfbeef63d92f3ce1eaf2f

  • SHA512

    8d3692ec7b5afaaa5c79ad18ae30396bf1f48ae315b80bb616b66226719973cf88358565df3cd22f4559ae9d2c45380bd08ed7d06df5eb211b0d87c514d739e8

  • SSDEEP

    6144:JwqqOJhU0Z0EnGL6nAWf6uYGwNaTc5Upfrxl6xkmjAR8fXjgHumUE:rm6jnI6nAWiu/wYTmejI68PsOJ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\f0493978287dbcd67442c34a4eae6c24_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\f0493978287dbcd67442c34a4eae6c24_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2248

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2248-0-0x0000000000400000-0x000000000046C000-memory.dmp

    Filesize

    432KB

  • memory/2248-1-0x0000000000400000-0x000000000046C000-memory.dmp

    Filesize

    432KB

  • memory/2248-2-0x0000000000400000-0x000000000046C000-memory.dmp

    Filesize

    432KB

  • memory/2248-3-0x0000000000400000-0x000000000046C000-memory.dmp

    Filesize

    432KB

  • memory/2248-4-0x0000000000400000-0x000000000046C000-memory.dmp

    Filesize

    432KB

  • memory/2248-5-0x0000000000400000-0x000000000046C000-memory.dmp

    Filesize

    432KB

  • memory/2248-6-0x0000000000400000-0x000000000046C000-memory.dmp

    Filesize

    432KB

  • memory/2248-7-0x0000000000400000-0x000000000046C000-memory.dmp

    Filesize

    432KB

  • memory/2248-8-0x0000000000400000-0x000000000046C000-memory.dmp

    Filesize

    432KB

  • memory/2248-9-0x0000000000400000-0x000000000046C000-memory.dmp

    Filesize

    432KB

  • memory/2248-10-0x0000000000400000-0x000000000046C000-memory.dmp

    Filesize

    432KB

  • memory/2248-11-0x0000000000400000-0x000000000046C000-memory.dmp

    Filesize

    432KB

  • memory/2248-12-0x0000000000400000-0x000000000046C000-memory.dmp

    Filesize

    432KB

  • memory/2248-13-0x0000000000400000-0x000000000046C000-memory.dmp

    Filesize

    432KB

  • memory/2248-14-0x0000000000400000-0x000000000046C000-memory.dmp

    Filesize

    432KB

  • memory/2248-15-0x0000000000400000-0x000000000046C000-memory.dmp

    Filesize

    432KB