Analysis

  • max time kernel
    93s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/10/2024, 22:53

General

  • Target

    0cc8d35e53bfa155468967517bcb9e92_JaffaCakes118.exe

  • Size

    7.0MB

  • MD5

    0cc8d35e53bfa155468967517bcb9e92

  • SHA1

    1bbf81a916467a54c465586d393572b37f5febd2

  • SHA256

    7401da5a2090da21be5cffc2642e51223fe647c785c95ed0d2bc817ace0ad669

  • SHA512

    7ffb0c56d5445a9d881840d98db1858200603516b1bae6a0669329f3d700c45489dbe220c99b70914b0cea81ffcd4e9acf36cf2f38cb5d2fba47735575c743ea

  • SSDEEP

    196608:ElwQRjqgoFxymuZa+dxHAl0F7i7CSTOQt1rPd+1Nu:ElP21y7ZHHAl2vqjPdwNu

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\0cc8d35e53bfa155468967517bcb9e92_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\0cc8d35e53bfa155468967517bcb9e92_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2136

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2136-0-0x0000000002B10000-0x0000000002CD1000-memory.dmp

    Filesize

    1.8MB

  • memory/2136-1-0x0000000000401000-0x0000000000402000-memory.dmp

    Filesize

    4KB

  • memory/2136-2-0x0000000000400000-0x000000000077A000-memory.dmp

    Filesize

    3.5MB

  • memory/2136-3-0x0000000000400000-0x000000000077A000-memory.dmp

    Filesize

    3.5MB

  • memory/2136-4-0x0000000000400000-0x000000000077A000-memory.dmp

    Filesize

    3.5MB

  • memory/2136-5-0x0000000002B10000-0x0000000002CD1000-memory.dmp

    Filesize

    1.8MB

  • memory/2136-6-0x0000000000400000-0x000000000077A000-memory.dmp

    Filesize

    3.5MB

  • memory/2136-9-0x0000000000400000-0x000000000077A000-memory.dmp

    Filesize

    3.5MB

  • memory/2136-10-0x0000000000400000-0x000000000077A000-memory.dmp

    Filesize

    3.5MB