Analysis
- max time kernel
94s - max time network
95s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
- submitted
11/10/2024, 20:23
General
- Target 36a69358bd37665ac6399686918a38ab_JaffaCakes118.exe
- Size 83KB
- Sample241011-y589vssblh
- SHA256 20e47d0081436df6ee8d415635a0becf03767f8b81bf3b5b1b7784b2ea3d162c
Malware Config
Signatures
- Drops file in Program Files directory 24 IoCs
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Modifies registry class 24 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\36a69358bd37665ac6399686918a38ab_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\36a69358bd37665ac6399686918a38ab_JaffaCakes118.exe"1⤵
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Modifies registry class
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2012-0-0x0000000000400000-0x000000000042C000-memory.dmp
memory/2012-1-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-2-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-7-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-8-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-6-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-9-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-10-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-11-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-12-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-13-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-14-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-15-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-16-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-17-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-18-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-19-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-20-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-21-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-22-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-23-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-24-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-25-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-26-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-27-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-28-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-29-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-30-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-31-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-32-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-33-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-34-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-35-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-36-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-37-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-38-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-39-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-40-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-41-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-42-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-43-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-44-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-45-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-46-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-47-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-48-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-49-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-50-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-51-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-52-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-53-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-54-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-55-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-56-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-57-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-58-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-59-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-60-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-61-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-62-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-63-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-64-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-65-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-537-0x0000000000500000-0x000000000051E000-memory.dmp
memory/2012-5013-0x0000000000400000-0x000000000042C000-memory.dmp
memory/2012-5950-0x0000000000500000-0x000000000051E000-memory.dmp