Analysis

  • max time kernel
    93s
  • max time network
    94s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-10-2024 01:41

General

  • Target

    084bdc5981f004ebd2b0db45fad6f0e7_JaffaCakes118.exe

  • Size

    576KB

  • MD5

    084bdc5981f004ebd2b0db45fad6f0e7

  • SHA1

    1f3b5a40ce256bdf06279aafb47131f2d40010ed

  • SHA256

    a91761c10ebe01b8a7a284a03c523464d31656fc21eb497e10e70cb6438f71c1

  • SHA512

    caa50a0e7986333cbad411247539b783c4ca254409efd121993eef1295917f49a10300f342857a0b8d4e2fe3fe22ec84c84a04cc86ff6fb0c72d1577d4c29c32

  • SSDEEP

    12288:9D/bNV2dgy1ByCf8wPtqCCdT8R5TmAIZnbC/qE:9ff26Iy6Ntq/80bC/

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\084bdc5981f004ebd2b0db45fad6f0e7_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\084bdc5981f004ebd2b0db45fad6f0e7_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2624

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2624-0-0x0000000074D3E000-0x0000000074D3F000-memory.dmp

    Filesize

    4KB

  • memory/2624-1-0x00000000005A0000-0x0000000000638000-memory.dmp

    Filesize

    608KB

  • memory/2624-2-0x0000000004FC0000-0x000000000505C000-memory.dmp

    Filesize

    624KB

  • memory/2624-3-0x00000000056A0000-0x0000000005C44000-memory.dmp

    Filesize

    5.6MB

  • memory/2624-4-0x0000000005190000-0x0000000005222000-memory.dmp

    Filesize

    584KB

  • memory/2624-5-0x0000000005070000-0x000000000507A000-memory.dmp

    Filesize

    40KB

  • memory/2624-6-0x00000000050F0000-0x0000000005146000-memory.dmp

    Filesize

    344KB

  • memory/2624-7-0x0000000074D30000-0x00000000754E0000-memory.dmp

    Filesize

    7.7MB

  • memory/2624-8-0x0000000074D30000-0x00000000754E0000-memory.dmp

    Filesize

    7.7MB

  • memory/2624-9-0x0000000074D3E000-0x0000000074D3F000-memory.dmp

    Filesize

    4KB

  • memory/2624-10-0x0000000074D30000-0x00000000754E0000-memory.dmp

    Filesize

    7.7MB