Analysis

  • max time kernel
    140s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    01/10/2024, 21:29

General

  • Target

    077d939fa81569b6fb2ae9a2d23b8c20_JaffaCakes118.exe

  • Size

    9.3MB

  • MD5

    077d939fa81569b6fb2ae9a2d23b8c20

  • SHA1

    87054ded3dcc4e6e3288db62511aa8628082359a

  • SHA256

    fb4b2b0356b89e46c47780c5f2ac6b32a18ec9f4cab09138efd17519baa3493d

  • SHA512

    84155f9cc13e944baa8ba7e6299205f4f55b4e41f8c2040bfbb2a7999162315daf6ee24f606c7146d7104aee79f6a61fe22ec7f13adea9365b14857ecb6054b9

  • SSDEEP

    196608:HcJSx4YO2icQ7YeHJ2JOEWj75Tg2ovfuNmVKo3KAUoO67:HheYHilZHJbEWj+29Nycftc

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\077d939fa81569b6fb2ae9a2d23b8c20_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\077d939fa81569b6fb2ae9a2d23b8c20_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1964

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1964-0-0x00000000020E0000-0x00000000022A4000-memory.dmp

    Filesize

    1.8MB

  • memory/1964-1-0x0000000000401000-0x0000000000402000-memory.dmp

    Filesize

    4KB

  • memory/1964-7-0x0000000000400000-0x000000000077A000-memory.dmp

    Filesize

    3.5MB

  • memory/1964-6-0x0000000000400000-0x000000000077A000-memory.dmp

    Filesize

    3.5MB

  • memory/1964-5-0x0000000000400000-0x000000000077A000-memory.dmp

    Filesize

    3.5MB

  • memory/1964-9-0x0000000000400000-0x000000000077A000-memory.dmp

    Filesize

    3.5MB

  • memory/1964-8-0x0000000000400000-0x000000000077A000-memory.dmp

    Filesize

    3.5MB

  • memory/1964-4-0x0000000000400000-0x000000000077A000-memory.dmp

    Filesize

    3.5MB

  • memory/1964-3-0x0000000000400000-0x000000000077A000-memory.dmp

    Filesize

    3.5MB

  • memory/1964-2-0x0000000000400000-0x000000000077A000-memory.dmp

    Filesize

    3.5MB

  • memory/1964-10-0x00000000020E0000-0x00000000022A4000-memory.dmp

    Filesize

    1.8MB