Analysis

  • max time kernel
    92s
  • max time network
    94s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/10/2024, 01:12

General

  • Target

    0d3fe285bc6e4b9ab99ca13ce9528591_JaffaCakes118.exe

  • Size

    355KB

  • MD5

    0d3fe285bc6e4b9ab99ca13ce9528591

  • SHA1

    fc3231f20ed64ec969954e9ff0f439225cc7627b

  • SHA256

    bac0d1713b827ef7ceaae8e9104e2453aa410116c1fd0828b7d94deab86e1fd3

  • SHA512

    e20b1687d437a2dabc81dc9add80001c49223a0d1e8c44fd80f768a5085abc5daf08284874b6fde9dbcbf94f4887b32a75e50fe0fd657391a202f1b28fe25eda

  • SSDEEP

    6144:xUrqA3AheuswyPnK9JcAhPtjykGpmgkAwPZWMaZGgbyEpcRN3pPchILCAKunE7:xUWA3AheuswykJzjyigkBPoMaNbyEUVo

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\0d3fe285bc6e4b9ab99ca13ce9528591_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\0d3fe285bc6e4b9ab99ca13ce9528591_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3576

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads