Analysis

  • max time kernel
    141s
  • max time network
    137s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/10/2024, 22:25

General

  • Target

    54081711d1b61e3cdc947571a181b5b8_JaffaCakes118.exe

  • Size

    83KB

  • MD5

    54081711d1b61e3cdc947571a181b5b8

  • SHA1

    27d273a88f02dd744c05a8c24db9f1128bd4b88b

  • SHA256

    d90e6ebabf948c2875ef76cafe57b68cddf9f857e18637496df096d7eb4c4b5c

  • SHA512

    964d4a996938589feb17b05847bfe25c4900ca51c146c45e219d249e313d15e3cfddfd2209eb4e3a4a482e2d84a6754233dcdff700cee47b4cc451767bf45f97

  • SSDEEP

    1536:0COp1lFT0OXZ/acr17E4Spl2X8tA73YbBsjfpjVrs2ryrd1vUQuqwcizSkX:y1lFAOJ/acpETpl2XmKfHs2quciu

Score
4/10

Malware Config

Signatures

  • Drops file in Program Files directory 18 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies registry class 24 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\54081711d1b61e3cdc947571a181b5b8_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\54081711d1b61e3cdc947571a181b5b8_JaffaCakes118.exe"
    1⤵
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies registry class
    PID:4100

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4100-0-0x0000000000400000-0x000000000042C000-memory.dmp

    Filesize

    176KB

  • memory/4100-1-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-2-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-6-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-8-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-9-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-10-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-11-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-12-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-13-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-14-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-15-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-16-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-17-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-18-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-19-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-20-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-21-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-22-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-23-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-24-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-25-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-26-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-27-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-28-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-29-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-30-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-31-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-32-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-33-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-34-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-35-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-36-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-37-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-38-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-39-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-40-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-41-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-42-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-43-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-44-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-45-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-46-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-47-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-48-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-49-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-50-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-51-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-52-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-54-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-55-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-56-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-57-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-58-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-59-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-60-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-61-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-62-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-63-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-64-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-65-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-524-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB

  • memory/4100-4998-0x0000000000400000-0x000000000042C000-memory.dmp

    Filesize

    176KB

  • memory/4100-5948-0x00000000001E0000-0x00000000001FE000-memory.dmp

    Filesize

    120KB