Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    13-10-2024 13:15

General

  • Target

    400e196df1b9c7c4e3d3c75b9d0a1edf_JaffaCakes118.exe

  • Size

    608KB

  • MD5

    400e196df1b9c7c4e3d3c75b9d0a1edf

  • SHA1

    9bdc96add42a46f119caf1717b9c519e74b628fe

  • SHA256

    799d9925ab65374e9776d65c04f3edf56f77e08a630e8c2d5adf6f22498e5c7a

  • SHA512

    ef863b612962dd8afe1dec14c17bf23b54682e87b85fbd753fe3231ab6c001b57562ff4867be46751654bbb2f73cd70fa28fd57a8244a28484083dbfd60f9881

  • SSDEEP

    12288:G0PyaIq1qiBt7YVrPvYDVgqUml1rYnH9PsHBCKocP1:D6a5VYVjvWbl1kn+MKoc9

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\400e196df1b9c7c4e3d3c75b9d0a1edf_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\400e196df1b9c7c4e3d3c75b9d0a1edf_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1880

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads