Analysis

  • max time kernel
    149s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/10/2024, 12:42

General

  • Target

    05dc17dcc60ce5cd42f02f0c9ba8cccf_JaffaCakes118.exe

  • Size

    430KB

  • MD5

    05dc17dcc60ce5cd42f02f0c9ba8cccf

  • SHA1

    95c62c216c8356d995d1356b99e54325628533cf

  • SHA256

    a0a51be4544e8ba8d2cef537583b3505127b877b8365113c999acb8a130bbfc6

  • SHA512

    87c386ad9f88e3b002600d456b321871d9ba4823dfd79525c1c36655f4fb170e57f16c588641d04f3586cf241f637cd55e320efb55e6d8d2e6fc0801253ce1a5

  • SSDEEP

    6144:LZSwSDISo3qZQJF2idZecnl20lHRxp3g7ncduD7yB9VCO6Sco4q8+dE6CqW5:lvf3qZuF3Z4mxxwDqVTVOCW5

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\05dc17dcc60ce5cd42f02f0c9ba8cccf_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\05dc17dcc60ce5cd42f02f0c9ba8cccf_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3172

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3172-0-0x0000000000400000-0x000000000048A000-memory.dmp

          Filesize

          552KB

        • memory/3172-1-0x0000000000B70000-0x0000000000BC4000-memory.dmp

          Filesize

          336KB

        • memory/3172-2-0x0000000000B60000-0x0000000000B61000-memory.dmp

          Filesize

          4KB

        • memory/3172-5-0x0000000000B20000-0x0000000000B21000-memory.dmp

          Filesize

          4KB

        • memory/3172-4-0x00000000024A0000-0x00000000024A1000-memory.dmp

          Filesize

          4KB

        • memory/3172-3-0x0000000000B40000-0x0000000000B41000-memory.dmp

          Filesize

          4KB

        • memory/3172-6-0x0000000000B10000-0x0000000000B11000-memory.dmp

          Filesize

          4KB

        • memory/3172-14-0x00000000034D0000-0x00000000034D1000-memory.dmp

          Filesize

          4KB

        • memory/3172-20-0x00000000034D0000-0x00000000034D1000-memory.dmp

          Filesize

          4KB

        • memory/3172-19-0x00000000034D0000-0x00000000034D1000-memory.dmp

          Filesize

          4KB

        • memory/3172-18-0x00000000034D0000-0x00000000034D1000-memory.dmp

          Filesize

          4KB

        • memory/3172-17-0x00000000034D0000-0x00000000034D1000-memory.dmp

          Filesize

          4KB

        • memory/3172-22-0x00000000034C0000-0x00000000034C1000-memory.dmp

          Filesize

          4KB

        • memory/3172-21-0x00000000034D0000-0x00000000034D1000-memory.dmp

          Filesize

          4KB

        • memory/3172-16-0x00000000034D0000-0x00000000034D1000-memory.dmp

          Filesize

          4KB

        • memory/3172-15-0x00000000024B0000-0x00000000024B1000-memory.dmp

          Filesize

          4KB

        • memory/3172-13-0x00000000034D0000-0x00000000034D1000-memory.dmp

          Filesize

          4KB

        • memory/3172-12-0x00000000034D0000-0x00000000034D1000-memory.dmp

          Filesize

          4KB

        • memory/3172-11-0x00000000034D0000-0x00000000034D1000-memory.dmp

          Filesize

          4KB

        • memory/3172-10-0x00000000034D0000-0x00000000034D1000-memory.dmp

          Filesize

          4KB

        • memory/3172-9-0x00000000034D0000-0x00000000034D1000-memory.dmp

          Filesize

          4KB

        • memory/3172-8-0x0000000002480000-0x0000000002481000-memory.dmp

          Filesize

          4KB

        • memory/3172-7-0x0000000002490000-0x0000000002491000-memory.dmp

          Filesize

          4KB

        • memory/3172-23-0x0000000000400000-0x000000000048A000-memory.dmp

          Filesize

          552KB

        • memory/3172-24-0x0000000000B70000-0x0000000000BC4000-memory.dmp

          Filesize

          336KB