Analysis

  • max time kernel
    116s
  • max time network
    97s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/10/2024, 05:21

General

  • Target

    2b97a4e7455cedfd7d868efa984a7fa6_JaffaCakes118.exe

  • Size

    570KB

  • MD5

    2b97a4e7455cedfd7d868efa984a7fa6

  • SHA1

    215bb9ce62d3b5d58179252b64ef9936097656f4

  • SHA256

    f40dec213618fd8cbbf48e323c478a7f5631df51cbfec0775e0589f6476573ac

  • SHA512

    16ce78b890d74b4df2a6b98b73c8356be84550bfcf5cace4e542dcdd44d5d1d629c634ee7d98332a15e48bd07519acb091845a5ff08c512891a4a54a821f95bf

  • SSDEEP

    12288:Dw9LXRndsoGUB5omLh3fnnAyBArveMYdr9jCBuBsI:D48oGUB5rh3vTA/WJDT

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2b97a4e7455cedfd7d868efa984a7fa6_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\2b97a4e7455cedfd7d868efa984a7fa6_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1096

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1096-0-0x0000000000670000-0x0000000000671000-memory.dmp

    Filesize

    4KB

  • memory/1096-1-0x0000000000400000-0x0000000000496000-memory.dmp

    Filesize

    600KB