Analysis
-
max time kernel
148s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
03-10-2024 00:50
General
-
Target
0d2bcf8a2d4c4ced43d5b6efe39aa712_JaffaCakes118.exe
-
Size
244KB
-
MD5
0d2bcf8a2d4c4ced43d5b6efe39aa712
-
SHA1
9718396a27ec090f5392e8e91a8c71f05623b74a
-
SHA256
34788994f4d7dd30f644796a869f0db7e3779999d25395b836153d108dc8a47d
-
SHA512
80441936f51f48c9e3784d7359ede589ee9b50dca4df2d31a0606c7b455adfa4d9a2d711e836eb1895ecbe16bfd3c99f5cf3f63501a6133fb5fa792a5985af57
-
SSDEEP
3072:wOSOrEj8LBctSm0mQec772UgH4juLAGg7oH/1XGQLChHVX0kUa:zSQEjoBTtecn4H4AE4s
Score
10/10
Malware Config
Signatures
-
Locky
Ransomware strain released in 2016, with advanced features like anti-analysis.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0d2bcf8a2d4c4ced43d5b6efe39aa712_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0d2bcf8a2d4c4ced43d5b6efe39aa712_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
260KB
-
Filesize
8KB
-
Filesize
260KB
-
Filesize
8KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB