Overview

overview

3

Static

static

3

125f0f339c...18.exe

windows7-x64

3

125f0f339c...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    91s
  • max time network
    139s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/10/2024, 07:18

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    125f0f339c52bab1f6bec60f8217bf3f_JaffaCakes118.exe

  • Size

    80KB

  • MD5

    125f0f339c52bab1f6bec60f8217bf3f

  • SHA1

    8af8226d83a100676001a2b69151f06903888a5a

  • SHA256

    e4d1132b7b6a07c67328f8e7a36f51c074591cb04266dfae058b5cc74936b529

  • SHA512

    465aa4718580fe92f2ccb0b3445b7dda6a97335e1785aa3423164c32b331bfb0895c90576304270af1360b10625597b1cd3733606a66625fdcd5e4051fbf7033

  • SSDEEP

    1536:7X/42dX49uSxNy5fuAOKzxiTQCF+oIjVhhPoSeFB9AD0:7X/4eI9RNZAOKCQp5hhPo9F00

Score
3/10
discovery

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\125f0f339c52bab1f6bec60f8217bf3f_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\125f0f339c52bab1f6bec60f8217bf3f_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2700

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2700-0-0x0000000000400000-0x000000000041F000-memory.dmp

          Filesize

          124KB

          Download

        • memory/2700-1-0x0000000000400000-0x000000000041F000-memory.dmp

          Filesize

          124KB

          Download