Analysis

  • max time kernel
    140s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    09/10/2024, 04:26

General

  • Target

    2ac9611fefe5b09271ab785059683af9_JaffaCakes118.exe

  • Size

    27.0MB

  • MD5

    2ac9611fefe5b09271ab785059683af9

  • SHA1

    84a84fccc7ed14b590f52d9275a7a863777bc39c

  • SHA256

    e52d1a7fb73c1da48edd144e929d7e503726453f7be5a709809e3da153ef6b98

  • SHA512

    2816296f5305be2e47bc1192d646cf15671a00485df40b7288b80257f437759719c299a94e93b2befa52679043e50526de889a3799b62e49b99bbbf0959751da

  • SSDEEP

    786432:JbwROl7+nBqgPvXI7541WTSi0jIiM41Fv0MaT:twAPgPvXI7541WeiGFMMaT

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2ac9611fefe5b09271ab785059683af9_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\2ac9611fefe5b09271ab785059683af9_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1456

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1456-1-0x00000000022A0000-0x0000000002464000-memory.dmp

    Filesize

    1.8MB

  • memory/1456-2-0x0000000000401000-0x0000000000407000-memory.dmp

    Filesize

    24KB

  • memory/1456-3-0x0000000000400000-0x0000000000779000-memory.dmp

    Filesize

    3.5MB

  • memory/1456-6-0x0000000000400000-0x0000000000779000-memory.dmp

    Filesize

    3.5MB

  • memory/1456-5-0x0000000000400000-0x0000000000779000-memory.dmp

    Filesize

    3.5MB

  • memory/1456-4-0x0000000000400000-0x0000000000779000-memory.dmp

    Filesize

    3.5MB

  • memory/1456-7-0x0000000000400000-0x0000000000779000-memory.dmp

    Filesize

    3.5MB

  • memory/1456-8-0x00000000022A0000-0x0000000002464000-memory.dmp

    Filesize

    1.8MB