Analysis
-
max time kernel
147s -
max time network
148s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
13-10-2024 09:27
General
-
Target
3f118d0b888430ab9f58fc2589207988_JaffaCakes118.exe
-
Size
136KB
-
MD5
3f118d0b888430ab9f58fc2589207988
-
SHA1
1231e4a00c3da3ae8001a0620bae1242ef95d095
-
SHA256
f927efd7cd2da3a052d857632f78ccf04b673e2774f6ce9a075e654dfd77d940
-
SHA512
5c304e823ebe0687ab462a39ce198787e53c85a16126207ce505132e8fc535e60ca2d50c74e586a667134dccbb4a187a4b102a3f3ea94bc356b36e9cf8c95c0a
-
SSDEEP
1536:nMBT3vXuo4fsgMmSIOfGbBeZ4Ao2rf86eeyfSHOg2eCl2N/R/O/7elOjTbD8VY+:nMxRNAOfGFeZDIJBOZc2N5WDy68i+
Score
10/10
Malware Config
Signatures
-
Locky
Ransomware strain released in 2016, with advanced features like anti-analysis.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\3f118d0b888430ab9f58fc2589207988_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3f118d0b888430ab9f58fc2589207988_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
116KB
-
Filesize
136KB
-
Filesize
136KB
-
Filesize
136KB
-
Filesize
136KB
-
Filesize
136KB
-
Filesize
136KB
-
Filesize
136KB