Analysis
-
max time kernel
140s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
06-10-2024 15:40
General
-
Target
18b1e69af7a77e66bf7ac1cd075a79b7_JaffaCakes118.exe
-
Size
207KB
-
MD5
18b1e69af7a77e66bf7ac1cd075a79b7
-
SHA1
1660f7092d13e2fb4a593d87e0f07712f4c67634
-
SHA256
0778db31d7e3259a65affc28ca1a317c67105a3fa75250b7370a5dfa70585c0c
-
SHA512
07543b5403ae3a22211d1c6d18af7b21c0b9ea35dc377eceb3f7ff2c77c144d7170ae1fed5d616ad158211b00cc93644c0a773ac8dcac481feef0d3059a219b1
-
SSDEEP
3072:rzkTIdtOHX1o/LgSVtFliee6HcQLkW+0J03r0NW85R6zeDmxGCaVhH:rzk8dtUC/Lg4t3eVukW+0J/F5Ueyt
Score
10/10
Malware Config
Signatures
-
Locky
Ransomware strain released in 2016, with advanced features like anti-analysis.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\18b1e69af7a77e66bf7ac1cd075a79b7_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\18b1e69af7a77e66bf7ac1cd075a79b7_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
228KB
-
Filesize
8KB
-
Filesize
228KB
-
Filesize
8KB
-
Filesize
228KB
-
Filesize
228KB
-
Filesize
228KB
-
Filesize
228KB
-
Filesize
228KB
-
Filesize
228KB
-
Filesize
228KB
-
Filesize
228KB