Analysis

  • max time kernel
    94s
  • max time network
    122s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/09/2024, 07:13

General

  • Target

    fe083730f249a59cb5d44b7493719c8d_JaffaCakes118.exe

  • Size

    105KB

  • MD5

    fe083730f249a59cb5d44b7493719c8d

  • SHA1

    00b366551030d6d20d31c7254636cbceabb53eaf

  • SHA256

    b9cb66231d99d3454903fa15e26ca2ebd7ae5595d8c7301703ede7b9bfd0f3ad

  • SHA512

    8307f12ab99f95441725e5d495420fa4f16f8952857a8aff790ad44e8e7cd2d6cd02e1655e73043b4f52c85dc05ecc524cdac61d98f4b8b0e89ef558ad062934

  • SSDEEP

    3072:SNjLT2DCigO1FmZHHtFu6PNrHv8yzDkhecPPGJ:SNT2WiFjCNrHv8yzDmecW

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\fe083730f249a59cb5d44b7493719c8d_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\fe083730f249a59cb5d44b7493719c8d_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3228

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3228-0-0x0000000000400000-0x000000000043A000-memory.dmp

    Filesize

    232KB

  • memory/3228-2-0x0000000000400000-0x000000000043A000-memory.dmp

    Filesize

    232KB