Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    02-10-2024 01:33

General

  • Target

    0844987d4d2dfc4c37a6c930d059fd86_JaffaCakes118.exe

  • Size

    34KB

  • MD5

    0844987d4d2dfc4c37a6c930d059fd86

  • SHA1

    da72992d39e29b7732a13fa7f2bd47579d5a5ddb

  • SHA256

    a4c7ef8959852a649e475395611ad05f35d9eb43ebc7e421a5229075f0da0ea2

  • SHA512

    aff83cc696425a0ec4ee00c5f5c62c3b1fa1e72c8fdfdd61c1a9b57a4907467777a40667f02efc1f3226c7cf91a73001773795ce10d3651b8661ed3f4bfbde93

  • SSDEEP

    384:w9qeqtmutwxYb5H6mXp4xXpNXpAvUmSy+aj+NgsUZGAUMl/ynFj8pXBza:+q75H6mXKxXjX2RSvBgYAUW/UF8

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\0844987d4d2dfc4c37a6c930d059fd86_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\0844987d4d2dfc4c37a6c930d059fd86_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2252

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2252-0-0x0000000001000000-0x000000000100A000-memory.dmp

    Filesize

    40KB

  • memory/2252-1-0x0000000001000000-0x000000000100A000-memory.dmp

    Filesize

    40KB