Analysis

  • max time kernel
    92s
  • max time network
    102s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/10/2024, 10:27

General

  • Target

    39871be2d1334766a034dc1543684c69_JaffaCakes118.exe

  • Size

    395KB

  • MD5

    39871be2d1334766a034dc1543684c69

  • SHA1

    efed7e4bca887a2009f9a94d8a73178a6d22c305

  • SHA256

    6509465702c2fce32bfee0aed724b5b7106e42ce46eb88781376f077ac88cee5

  • SHA512

    89157ba9de90064868da4616417da1b9768b4048cdd65385f2615e50c8ec25d96b321ae289022a60ea12adb2d3fadfeba650f0a2adb7c736c94bd1222f04bc8d

  • SSDEEP

    12288:8w1dILPAX8ln6aB4WP3E29V8S4Dhg0fn2J6Z2SLqF4fllFRYxiI8tRX1oX3aCK4L:8w1dILPAX8ln6aB4WP3E29V8S4Dhg0fc

Score
5/10

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\39871be2d1334766a034dc1543684c69_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\39871be2d1334766a034dc1543684c69_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:4316

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4316-0-0x0000000000400000-0x0000000000462000-memory.dmp

    Filesize

    392KB

  • memory/4316-2-0x0000000000400000-0x0000000000462000-memory.dmp

    Filesize

    392KB