Analysis

  • max time kernel
    103s
  • max time network
    104s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/09/2024, 15:06

General

  • Target

    fc8edd6d4e3551282c432403fe33a471_JaffaCakes118.exe

  • Size

    321KB

  • MD5

    fc8edd6d4e3551282c432403fe33a471

  • SHA1

    0ad3755cf5118579da44d949077ddfcc5e5a77ab

  • SHA256

    2407da340def04b4a985b22976a1a078ffed9aae19e314dc808fd54c248a2e17

  • SHA512

    22e859cf8a3d103b0636f44ff394c679766349384394a4a2bd9ec9a5113149b0cf896e24711d288e50cb20b4fefffb2a3962edccc4c539319fd5582314bdd75f

  • SSDEEP

    6144:v3MPsFvYvWr56TPvA6zpP+rMJcs4iYUddbEXRBJ8WgPuNF:asFvV5+PvA6sOcOAXHcPuNF

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\fc8edd6d4e3551282c432403fe33a471_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\fc8edd6d4e3551282c432403fe33a471_JaffaCakes118.exe"
    1⤵
    • Drops file in Windows directory
    • System Location Discovery: System Language Discovery
    PID:2392

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2392-0-0x0000000001C30000-0x0000000001D30000-memory.dmp

    Filesize

    1024KB

  • memory/2392-2-0x00000000048F0000-0x000000000491F000-memory.dmp

    Filesize

    188KB

  • memory/2392-9-0x0000000005890000-0x00000000058B7000-memory.dmp

    Filesize

    156KB