Analysis

  • max time kernel
    148s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-10-2024 01:29

General

  • Target

    0841aab7098b5221126c1e03a72ed181_JaffaCakes118.exe

  • Size

    381KB

  • MD5

    0841aab7098b5221126c1e03a72ed181

  • SHA1

    fa03800ea51479a5a7a9880f4721182de4d6f59d

  • SHA256

    b41b959e2c0719ab9912e7239fd594256ae4e39439098b937bc3437d19f1a64f

  • SHA512

    ab1b47fdd171661e706767423a6dd26b119c1fc6150ac589967b77e2662634a3fd94887eef86509cd02f810ca8a277271dbc66d2c522f451fc6e73314b1f8ab3

  • SSDEEP

    6144:W1FVF2idZecnl20lHRxp3gUcmqGuPBxFiYybynSVUdIIctJjinpYkkeRD:WHF3Z4mxxrcmhe3yOSVx5vhM

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\0841aab7098b5221126c1e03a72ed181_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\0841aab7098b5221126c1e03a72ed181_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:4544

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4544-0-0x0000000000400000-0x0000000000473000-memory.dmp

    Filesize

    460KB

  • memory/4544-1-0x0000000002110000-0x0000000002164000-memory.dmp

    Filesize

    336KB

  • memory/4544-25-0x00000000023D0000-0x00000000023D1000-memory.dmp

    Filesize

    4KB

  • memory/4544-22-0x00000000023A0000-0x00000000023A1000-memory.dmp

    Filesize

    4KB

  • memory/4544-30-0x00000000032D0000-0x00000000032D1000-memory.dmp

    Filesize

    4KB

  • memory/4544-29-0x00000000032E0000-0x00000000032E1000-memory.dmp

    Filesize

    4KB

  • memory/4544-28-0x00000000032F0000-0x00000000032F1000-memory.dmp

    Filesize

    4KB

  • memory/4544-27-0x00000000005E0000-0x00000000005E1000-memory.dmp

    Filesize

    4KB

  • memory/4544-26-0x00000000005D0000-0x00000000005D1000-memory.dmp

    Filesize

    4KB

  • memory/4544-21-0x00000000023C0000-0x00000000023C1000-memory.dmp

    Filesize

    4KB

  • memory/4544-20-0x00000000021D0000-0x00000000021D1000-memory.dmp

    Filesize

    4KB

  • memory/4544-19-0x0000000002350000-0x0000000002351000-memory.dmp

    Filesize

    4KB

  • memory/4544-18-0x0000000002210000-0x0000000002211000-memory.dmp

    Filesize

    4KB

  • memory/4544-17-0x0000000002220000-0x0000000002221000-memory.dmp

    Filesize

    4KB

  • memory/4544-16-0x00000000021B0000-0x00000000021B1000-memory.dmp

    Filesize

    4KB

  • memory/4544-15-0x00000000021C0000-0x00000000021C1000-memory.dmp

    Filesize

    4KB

  • memory/4544-14-0x0000000002340000-0x0000000002341000-memory.dmp

    Filesize

    4KB

  • memory/4544-13-0x00000000021E0000-0x00000000021E1000-memory.dmp

    Filesize

    4KB

  • memory/4544-12-0x0000000002200000-0x0000000002201000-memory.dmp

    Filesize

    4KB

  • memory/4544-11-0x00000000032B0000-0x00000000032B4000-memory.dmp

    Filesize

    16KB

  • memory/4544-10-0x0000000002190000-0x0000000002191000-memory.dmp

    Filesize

    4KB

  • memory/4544-9-0x00000000032C0000-0x00000000032C1000-memory.dmp

    Filesize

    4KB

  • memory/4544-8-0x0000000000650000-0x0000000000651000-memory.dmp

    Filesize

    4KB

  • memory/4544-7-0x0000000002170000-0x0000000002171000-memory.dmp

    Filesize

    4KB

  • memory/4544-6-0x00000000005F0000-0x00000000005F1000-memory.dmp

    Filesize

    4KB

  • memory/4544-5-0x0000000000600000-0x0000000000601000-memory.dmp

    Filesize

    4KB

  • memory/4544-4-0x0000000002180000-0x0000000002181000-memory.dmp

    Filesize

    4KB

  • memory/4544-24-0x0000000002370000-0x0000000002371000-memory.dmp

    Filesize

    4KB

  • memory/4544-23-0x0000000002380000-0x0000000002381000-memory.dmp

    Filesize

    4KB

  • memory/4544-3-0x0000000000620000-0x0000000000621000-memory.dmp

    Filesize

    4KB

  • memory/4544-2-0x0000000000640000-0x0000000000641000-memory.dmp

    Filesize

    4KB

  • memory/4544-31-0x0000000000400000-0x0000000000473000-memory.dmp

    Filesize

    460KB

  • memory/4544-32-0x0000000002110000-0x0000000002164000-memory.dmp

    Filesize

    336KB