Overview

overview

3

Static

static

3

18006142f5...18.exe

windows7-x64

3

18006142f5...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    96s
  • max time network
    98s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/10/2024, 12:01

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    18006142f5a7dca5f4227807dc2c535f_JaffaCakes118.exe

  • Size

    609KB

  • MD5

    18006142f5a7dca5f4227807dc2c535f

  • SHA1

    a42f7dd1abbde48126edd04997ccb7008e6e4a7d

  • SHA256

    623ee0bdd2f365677e870ad0a966addf7d480f17396072aee56b5e0f1aa87b94

  • SHA512

    c38a81825b4f665c58eed2d287760cd1f362d6bedf748a7abeba471bf09adb7ba0683678c9ffbf7993c34d72365b8c991c99bfdea3fa857fd579f622e6706f8b

  • SSDEEP

    12288:gNarN0vwK5iNz2QQg/uXXsy9Dcj9bOaNTTRJuQ:zJ0h5iNz2Qv2XXsy9DcjHN/7T

Score
3/10
discovery

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\18006142f5a7dca5f4227807dc2c535f_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\18006142f5a7dca5f4227807dc2c535f_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1784

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1784-0-0x0000000002490000-0x0000000002491000-memory.dmp

          Filesize

          4KB

          Download

        • memory/1784-1-0x0000000000400000-0x00000000004A2000-memory.dmp

          Filesize

          648KB

          Download