Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/10/2024, 11:34

General

  • Target

    17861d6ca97a7f4a18291d754e840953_JaffaCakes118.exe

  • Size

    32KB

  • MD5

    17861d6ca97a7f4a18291d754e840953

  • SHA1

    044dbf69e713cfdc795dd7b28775e38b3735c9de

  • SHA256

    d1a95b9bb26ca5e90e91669b47f29ae403d44d4732a3b5c4e3153670966d5f7d

  • SHA512

    957a87c75f6a14fc54b2421f8af3d7fa639f6d089c0d7cd2716c55812c9460b83845860b3d086f299da01222fc3798bb03ef0ac0c3ca7efc16e786522156479b

  • SSDEEP

    384:iunH6c5YALr69UEA1gkcBcFB3kzaGQPtMPQo125ihx/S5tWlwQGhpq:D6sYor2bkF3kz1QFMPQA+i25tWlw5q

Score
5/10

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\17861d6ca97a7f4a18291d754e840953_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\17861d6ca97a7f4a18291d754e840953_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1468

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1468-0-0x0000000000400000-0x000000000040F000-memory.dmp

          Filesize

          60KB