Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13-10-2024 19:15

General

  • Target

    419b49bb1aa21dae27891ab75816d307_JaffaCakes118.exe

  • Size

    22KB

  • MD5

    419b49bb1aa21dae27891ab75816d307

  • SHA1

    6c0ad6c2c16f22c9ab3f5741b94f61a86e89170f

  • SHA256

    bb1a5935d8e1556589844145706d9162c79ca03fa167ae5aefb43060db2218a5

  • SHA512

    47691d8c3cfa1423cb4a5f35f81399da182a653b7ccc03b360146b15a1687f7e844cc9e1c2b093a3a41eb4e09b6df4b46455c85728f7dc83b3951ae3d5d8d1d6

  • SSDEEP

    192:IfIo0KSSd8Us8SkRQnRIDIpFU2SRST5n6FHh1NGkZTKmslFQ6t8GeO82pQ:vB8BRSRIIU2SRST54Hh1NGkBsle6KD

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\419b49bb1aa21dae27891ab75816d307_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\419b49bb1aa21dae27891ab75816d307_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3416

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3416-0-0x0000000079BF0000-0x0000000079BF5000-memory.dmp

    Filesize

    20KB

  • memory/3416-1-0x0000000079BF0000-0x0000000079BF5000-memory.dmp

    Filesize

    20KB