Analysis

  • max time kernel
    139s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/10/2024, 20:44

General

  • Target

    49ead46b04d9bdf2050500dfad0d40d6_JaffaCakes118.exe

  • Size

    460KB

  • MD5

    49ead46b04d9bdf2050500dfad0d40d6

  • SHA1

    6e0ed62f106e05dbb2f0e35ecb94bb6479db84a3

  • SHA256

    acdd870b59bc8a3d464199fe6f72138dfb57f98bd60b0f5e6295d643025cbaee

  • SHA512

    78d0f3d2b6d7b30c5d089329b990432bd3a77817392db5c1954ca69c730ec7f2384f0f8c038c75882cf1f04b9321ee20139987d9da5977ab87b6bb86eb7bbbb5

  • SSDEEP

    12288:J0m3blK36QhuIOyFHxlAaO8ye3/9DlkR7G:d3blO6NWTlAaO8y0aRi

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\49ead46b04d9bdf2050500dfad0d40d6_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\49ead46b04d9bdf2050500dfad0d40d6_JaffaCakes118.exe"
    1⤵
    • Checks computer location settings
    • System Location Discovery: System Language Discovery
    PID:4200

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Patch-5.xx.exe

          Filesize

          107KB

          MD5

          56f60965bb7cdfe328d691adb40591cc

          SHA1

          53481715a3822ae1498b2e58cb96c4e7e80c6179

          SHA256

          a11c768f5897a072ab01e36092afd0002c5ad825be609ef6f5fe4891f86ecf2d

          SHA512

          d2c2bdfffd4860336e25fad2f138c2160a085c9654e948ada0d8afb761e63c9ab723b6bc22b3f5fcf68341689ab3f6e1d96cbd6f8720fd1b061dfeb6f14a9fef