Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    04/10/2024, 18:14

General

  • Target

    146e160f73ec900df86d58012b5c593f_JaffaCakes118.exe

  • Size

    316KB

  • MD5

    146e160f73ec900df86d58012b5c593f

  • SHA1

    0fe7d0c4c1ede10e26a2731ab4f9313be84a726e

  • SHA256

    cf5b9cbde6f04f4d2dbf06112c2927fe36ffcd99d74262304abbf2d4da14b80a

  • SHA512

    af31d8cd13aac65174c564be19d05e8c8988ede91bd2ddab4a4bb3f4f710c879e267d421007d11c592f132a7603a1e82e744e9c0b3505d9aa14f063ced32b24f

  • SSDEEP

    6144:2jQjsFQvFOMT4Q9lSy5p8o5Y53r8HYKmAhRHNm/KPRhbOf+:2jtQtZr9lSGxK3iYK7HYWRgf+

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\146e160f73ec900df86d58012b5c593f_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\146e160f73ec900df86d58012b5c593f_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1748

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1748-0-0x0000000001D10000-0x0000000001D70000-memory.dmp

    Filesize

    384KB

  • memory/1748-3-0x00000000001C0000-0x00000000001C1000-memory.dmp

    Filesize

    4KB

  • memory/1748-1-0x00000000001C0000-0x00000000001C1000-memory.dmp

    Filesize

    4KB

  • memory/1748-5-0x0000000000400000-0x0000000000474000-memory.dmp

    Filesize

    464KB

  • memory/1748-6-0x0000000000400000-0x0000000000437000-memory.dmp

    Filesize

    220KB

  • memory/1748-7-0x0000000000400000-0x0000000000437000-memory.dmp

    Filesize

    220KB