Analysis

  • max time kernel
    120s
  • max time network
    126s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/10/2024, 06:42

General

  • Target

    04baeff8ea260c27907a8fe0415558cd_JaffaCakes118.exe

  • Size

    387KB

  • MD5

    04baeff8ea260c27907a8fe0415558cd

  • SHA1

    4cf716059bc9dd41dc290d00030723aaab6446b8

  • SHA256

    6667f8a224bcc15df3530a1b2eb387b553508c7e6863d4d593338f757e9d2942

  • SHA512

    137e4c5d74b4b78e259a4cefa2ec5fa3782f8fa46adc09ec188885cf5ac2a571c37f42988b77b6811fb0c306a77ec3133f70e43a2b7c76a47d8c5f24b4c726dc

  • SSDEEP

    6144:WyR/cxNotF2idZecnl20lHRxp3gtQ09HgsS/eLqHNonB/gNCmK7Qx99hM5IXKq:WyR/cxsF3Z4mxxZMHg5L8mTVhXJ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\04baeff8ea260c27907a8fe0415558cd_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\04baeff8ea260c27907a8fe0415558cd_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3960

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3960-0-0x0000000000400000-0x0000000000479000-memory.dmp

          Filesize

          484KB

        • memory/3960-1-0x0000000002230000-0x0000000002284000-memory.dmp

          Filesize

          336KB

        • memory/3960-13-0x0000000003400000-0x0000000003404000-memory.dmp

          Filesize

          16KB

        • memory/3960-12-0x0000000003410000-0x0000000003411000-memory.dmp

          Filesize

          4KB

        • memory/3960-11-0x00000000023F0000-0x00000000023F1000-memory.dmp

          Filesize

          4KB

        • memory/3960-10-0x0000000003410000-0x0000000003411000-memory.dmp

          Filesize

          4KB

        • memory/3960-9-0x0000000003410000-0x0000000003411000-memory.dmp

          Filesize

          4KB

        • memory/3960-8-0x00000000023C0000-0x00000000023C1000-memory.dmp

          Filesize

          4KB

        • memory/3960-7-0x00000000023D0000-0x00000000023D1000-memory.dmp

          Filesize

          4KB

        • memory/3960-6-0x00000000021F0000-0x00000000021F1000-memory.dmp

          Filesize

          4KB

        • memory/3960-5-0x0000000002200000-0x0000000002201000-memory.dmp

          Filesize

          4KB

        • memory/3960-4-0x00000000023E0000-0x00000000023E1000-memory.dmp

          Filesize

          4KB

        • memory/3960-3-0x0000000002220000-0x0000000002221000-memory.dmp

          Filesize

          4KB

        • memory/3960-2-0x00000000023B0000-0x00000000023B1000-memory.dmp

          Filesize

          4KB

        • memory/3960-27-0x0000000002530000-0x0000000002531000-memory.dmp

          Filesize

          4KB

        • memory/3960-26-0x00000000024D0000-0x00000000024D1000-memory.dmp

          Filesize

          4KB

        • memory/3960-25-0x00000000024E0000-0x00000000024E1000-memory.dmp

          Filesize

          4KB

        • memory/3960-24-0x0000000002500000-0x0000000002501000-memory.dmp

          Filesize

          4KB

        • memory/3960-23-0x0000000002520000-0x0000000002521000-memory.dmp

          Filesize

          4KB

        • memory/3960-22-0x0000000002440000-0x0000000002441000-memory.dmp

          Filesize

          4KB

        • memory/3960-21-0x00000000024B0000-0x00000000024B1000-memory.dmp

          Filesize

          4KB

        • memory/3960-20-0x0000000002480000-0x0000000002481000-memory.dmp

          Filesize

          4KB

        • memory/3960-19-0x0000000002490000-0x0000000002491000-memory.dmp

          Filesize

          4KB

        • memory/3960-18-0x0000000002420000-0x0000000002421000-memory.dmp

          Filesize

          4KB

        • memory/3960-17-0x0000000002430000-0x0000000002431000-memory.dmp

          Filesize

          4KB

        • memory/3960-16-0x00000000024A0000-0x00000000024A1000-memory.dmp

          Filesize

          4KB

        • memory/3960-15-0x0000000002450000-0x0000000002451000-memory.dmp

          Filesize

          4KB

        • memory/3960-14-0x0000000002470000-0x0000000002471000-memory.dmp

          Filesize

          4KB

        • memory/3960-28-0x00000000021D0000-0x00000000021D1000-memory.dmp

          Filesize

          4KB

        • memory/3960-31-0x0000000003430000-0x0000000003431000-memory.dmp

          Filesize

          4KB

        • memory/3960-32-0x0000000003420000-0x0000000003421000-memory.dmp

          Filesize

          4KB

        • memory/3960-30-0x0000000003440000-0x0000000003441000-memory.dmp

          Filesize

          4KB

        • memory/3960-29-0x00000000021E0000-0x00000000021E1000-memory.dmp

          Filesize

          4KB

        • memory/3960-33-0x0000000000400000-0x0000000000479000-memory.dmp

          Filesize

          484KB

        • memory/3960-34-0x0000000002230000-0x0000000002284000-memory.dmp

          Filesize

          336KB