Analysis

  • max time kernel
    140s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    03/10/2024, 04:40

General

  • Target

    0df6bb1d320979a1d19c8e2dc8c232ea_JaffaCakes118.exe

  • Size

    1.1MB

  • MD5

    0df6bb1d320979a1d19c8e2dc8c232ea

  • SHA1

    219ba12a181d076cb34052516edf3133e1b731c8

  • SHA256

    cf1db77ff22b62646461505b99430aa71a503c11b0a026ce03a9fe07d7ebc43d

  • SHA512

    5e26cb908a1b7765f0c5ac29b8e47828c96fe99fcbc762cf899d97a44c3f866db0e2edb62829e2c1fd3b6fcd55332185f9324a7e7f39826ca20bad6f98d83ced

  • SSDEEP

    24576:moC27sZwIYtxC1GYdjzEjNW7G/zMAjOuP7SK/cRgOnmq9g6jC4+lQKl:2MsijM9dvowG/5vPNcOU7m6+4+dl

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\0df6bb1d320979a1d19c8e2dc8c232ea_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\0df6bb1d320979a1d19c8e2dc8c232ea_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2100

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2100-1-0x00000000002F0000-0x0000000000350000-memory.dmp

    Filesize

    384KB

  • memory/2100-0-0x0000000000400000-0x0000000000760000-memory.dmp

    Filesize

    3.4MB

  • memory/2100-5-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2100-9-0x0000000003400000-0x0000000003401000-memory.dmp

    Filesize

    4KB

  • memory/2100-8-0x0000000000350000-0x0000000000351000-memory.dmp

    Filesize

    4KB

  • memory/2100-7-0x00000000002A0000-0x00000000002A1000-memory.dmp

    Filesize

    4KB

  • memory/2100-6-0x0000000000360000-0x0000000000361000-memory.dmp

    Filesize

    4KB

  • memory/2100-4-0x00000000002D0000-0x00000000002D1000-memory.dmp

    Filesize

    4KB

  • memory/2100-3-0x0000000000270000-0x0000000000271000-memory.dmp

    Filesize

    4KB

  • memory/2100-2-0x0000000000280000-0x0000000000281000-memory.dmp

    Filesize

    4KB

  • memory/2100-10-0x00000000002C0000-0x00000000002C1000-memory.dmp

    Filesize

    4KB

  • memory/2100-38-0x00000000020A0000-0x00000000020A1000-memory.dmp

    Filesize

    4KB

  • memory/2100-39-0x0000000000BB0000-0x0000000000BB1000-memory.dmp

    Filesize

    4KB

  • memory/2100-37-0x0000000002080000-0x0000000002081000-memory.dmp

    Filesize

    4KB

  • memory/2100-36-0x0000000002040000-0x0000000002041000-memory.dmp

    Filesize

    4KB

  • memory/2100-35-0x00000000020B0000-0x00000000020B1000-memory.dmp

    Filesize

    4KB

  • memory/2100-34-0x0000000002050000-0x0000000002051000-memory.dmp

    Filesize

    4KB

  • memory/2100-33-0x0000000002060000-0x0000000002061000-memory.dmp

    Filesize

    4KB

  • memory/2100-32-0x00000000033F0000-0x00000000033F1000-memory.dmp

    Filesize

    4KB

  • memory/2100-31-0x0000000002010000-0x0000000002011000-memory.dmp

    Filesize

    4KB

  • memory/2100-30-0x00000000008F0000-0x00000000008F1000-memory.dmp

    Filesize

    4KB

  • memory/2100-29-0x0000000000BC0000-0x0000000000BC1000-memory.dmp

    Filesize

    4KB

  • memory/2100-28-0x0000000002000000-0x0000000002001000-memory.dmp

    Filesize

    4KB

  • memory/2100-27-0x0000000000900000-0x0000000000901000-memory.dmp

    Filesize

    4KB

  • memory/2100-26-0x0000000000BA0000-0x0000000000BA1000-memory.dmp

    Filesize

    4KB

  • memory/2100-25-0x00000000033F0000-0x00000000033F1000-memory.dmp

    Filesize

    4KB

  • memory/2100-24-0x00000000033F0000-0x00000000033F1000-memory.dmp

    Filesize

    4KB

  • memory/2100-23-0x00000000033F0000-0x00000000033F1000-memory.dmp

    Filesize

    4KB

  • memory/2100-22-0x00000000033F0000-0x00000000033F1000-memory.dmp

    Filesize

    4KB

  • memory/2100-21-0x0000000003400000-0x0000000003401000-memory.dmp

    Filesize

    4KB

  • memory/2100-20-0x0000000003400000-0x0000000003401000-memory.dmp

    Filesize

    4KB

  • memory/2100-19-0x0000000003400000-0x0000000003401000-memory.dmp

    Filesize

    4KB

  • memory/2100-18-0x0000000003400000-0x0000000003401000-memory.dmp

    Filesize

    4KB

  • memory/2100-17-0x0000000003400000-0x0000000003401000-memory.dmp

    Filesize

    4KB

  • memory/2100-16-0x0000000003400000-0x0000000003401000-memory.dmp

    Filesize

    4KB

  • memory/2100-15-0x0000000003400000-0x0000000003401000-memory.dmp

    Filesize

    4KB

  • memory/2100-14-0x0000000003400000-0x0000000003401000-memory.dmp

    Filesize

    4KB

  • memory/2100-13-0x0000000003400000-0x0000000003401000-memory.dmp

    Filesize

    4KB

  • memory/2100-12-0x0000000003400000-0x0000000003401000-memory.dmp

    Filesize

    4KB

  • memory/2100-11-0x0000000003400000-0x0000000003401000-memory.dmp

    Filesize

    4KB

  • memory/2100-40-0x00000000033F0000-0x00000000033F1000-memory.dmp

    Filesize

    4KB

  • memory/2100-41-0x00000000033F0000-0x00000000033F2000-memory.dmp

    Filesize

    8KB

  • memory/2100-44-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/2100-42-0x0000000000400000-0x0000000000760000-memory.dmp

    Filesize

    3.4MB

  • memory/2100-43-0x0000000000250000-0x0000000000251000-memory.dmp

    Filesize

    4KB

  • memory/2100-45-0x00000000002F0000-0x0000000000350000-memory.dmp

    Filesize

    384KB

  • memory/2100-46-0x0000000003400000-0x0000000003401000-memory.dmp

    Filesize

    4KB

  • memory/2100-47-0x00000000033F0000-0x00000000033F1000-memory.dmp

    Filesize

    4KB

  • memory/2100-48-0x0000000000400000-0x0000000000760000-memory.dmp

    Filesize

    3.4MB