Analysis

  • max time kernel
    131s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    04/10/2024, 18:16

General

  • Target

    146fad7cec98b3731df1c3e27c649206_JaffaCakes118.exe

  • Size

    292KB

  • MD5

    146fad7cec98b3731df1c3e27c649206

  • SHA1

    99a180414a9e20f7e921f3536abc7bddc5510e1f

  • SHA256

    9772adf304c44c0c0e43faef7a58614359ad3d7155b2d5d5bc18678b271fcd49

  • SHA512

    61a9d03a5e68a71fd9d63fbd2c22f6ca1d776a259601e6cc1e76eb2cbcd80cee3a1ec82d669209ac6e3553f305994e20a6aa61622aac8a7f10cd6d3a3857ba28

  • SSDEEP

    6144:oXkPC5XvxwKdcA82ErcFvjipqbIjoimSLTPUox0:oXkuX5d78BrcFvjipaIjoALLUI

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\146fad7cec98b3731df1c3e27c649206_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\146fad7cec98b3731df1c3e27c649206_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    PID:1120

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1120-0-0x0000000000330000-0x000000000036F000-memory.dmp

          Filesize

          252KB

        • memory/1120-1-0x0000000000470000-0x0000000000471000-memory.dmp

          Filesize

          4KB

        • memory/1120-2-0x0000000000401000-0x0000000000403000-memory.dmp

          Filesize

          8KB

        • memory/1120-3-0x0000000000400000-0x000000000044C000-memory.dmp

          Filesize

          304KB

        • memory/1120-4-0x0000000000330000-0x000000000036F000-memory.dmp

          Filesize

          252KB

        • memory/1120-5-0x0000000000470000-0x0000000000471000-memory.dmp

          Filesize

          4KB