Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-10-2024 04:25

General

  • Target

    08dfec3eb29d5785117ea9d0955f1928_JaffaCakes118.exe

  • Size

    255KB

  • MD5

    08dfec3eb29d5785117ea9d0955f1928

  • SHA1

    39674973f467aa65cfdca27d096356828bd72a6c

  • SHA256

    e70158982553fec99dd1a335b89e4846b53278b590632d3a902faeb52c2381d9

  • SHA512

    aac4c78f16296c4a572fdd30c59ba611b01651f6be6efc6dc93097759551c5b13224ecc1c088a9704c81831cbc0afc4eedbd29ebb287947afea08dcd80769273

  • SSDEEP

    3072:47jxlwUzfl46zOlrxd7LQe+aX3K10m8v7Sxa:yxlZO3lLLF+aX360my7d

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\08dfec3eb29d5785117ea9d0955f1928_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\08dfec3eb29d5785117ea9d0955f1928_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3276

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3276-0-0x0000000000400000-0x000000000043FC93-memory.dmp

    Filesize

    255KB

  • memory/3276-1-0x0000000000400000-0x000000000043FC93-memory.dmp

    Filesize

    255KB