Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    01-10-2024 11:27

General

  • Target

    05a28c896165e53f5d6032766eca20f7_JaffaCakes118.exe

  • Size

    16.4MB

  • MD5

    05a28c896165e53f5d6032766eca20f7

  • SHA1

    921d1f2e000123ac8bf1b7f277c54561d3c5aca9

  • SHA256

    b26f6fdbc0d66fe86b15b62e9a94bfb9aa8f298bd25dcb096aef733bd0179723

  • SHA512

    c60dc6d8137ea7e2a35c137e93b97af85f0db5f2b8dbd4c7679385929787be2c981796cc585a7388f43a80647ff216c4d0fdfc7e361ddbcdc15affa4741504c8

  • SSDEEP

    393216:Zz4MAxwg1ifJOomKDskJzzo3pyvltZxQHVr7ApF2hgx:Zz4MAxH1OcomKD1Jf0puPqHlA/2M

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\05a28c896165e53f5d6032766eca20f7_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\05a28c896165e53f5d6032766eca20f7_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2980

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads