Analysis
-
max time kernel
140s -
max time network
142s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
22-10-2024 01:44
General
-
Target
68543ab6319d2ce4a542bde832553cdf_JaffaCakes118.exe
-
Size
189KB
-
MD5
68543ab6319d2ce4a542bde832553cdf
-
SHA1
c8ef52f7701ca146986ce9d61ef9a3223c28cda5
-
SHA256
13732c5d65f0a4c62d581e41eea5a6702c95dce18e143320a41fae0942458ed4
-
SHA512
a7df5f1566baa8da20b0c15caded27e19cd1f4c871fb33923eb7d60a2f6b20fef01c8c3532ee9076d77464749059a4045e00f5da2f1240bcc3c25f05f490f8ac
-
SSDEEP
3072:qjcs7w6QUIHndbCAX+JlqoqSaSXb/+xBwHAD5qwQhUKx44XU/WD2fS2Uey:icssTUUndenJlqVSXrOBDYFtxPUqC
Score
10/10
Malware Config
Signatures
-
Locky
Ransomware strain released in 2016, with advanced features like anti-analysis.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\68543ab6319d2ce4a542bde832553cdf_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\68543ab6319d2ce4a542bde832553cdf_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
204KB
-
Filesize
8KB
-
Filesize
204KB
-
Filesize
8KB
-
Filesize
204KB
-
Filesize
204KB
-
Filesize
204KB
-
Filesize
204KB
-
Filesize
204KB
-
Filesize
204KB
-
Filesize
204KB