Analysis

  • max time kernel
    140s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/10/2024, 12:33

General

  • Target

    42623c75f31e0e12a49c19e5fa087447_JaffaCakes118.exe

  • Size

    184KB

  • MD5

    42623c75f31e0e12a49c19e5fa087447

  • SHA1

    f94244904dd493b640d7d47bcb87fb710b9b7a5d

  • SHA256

    05d216ab1b0be075357150957875bc4eff019cab8277ae2466ae8031a4db8c85

  • SHA512

    084cbd21837fbf55ca6c1634a2adf6b3dc145eeec1df744ce7af3daf9a6f6db8b3c0549ab882d16c97880fe7f49eac6b23fb81f308efefd0d4c360245ca84a85

  • SSDEEP

    3072:huRromuxcOAEAmj8MhmrC8PMEXYMuxGldk7xKDCeVylPvpFv:huhowDEAzMYrC8IyBDylPvpF

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\42623c75f31e0e12a49c19e5fa087447_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\42623c75f31e0e12a49c19e5fa087447_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:4728
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 4728 -s 216
      2⤵
      • Program crash
      PID:1996
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 4728 -ip 4728
    1⤵
      PID:4492

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads