Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
24-10-2024 00:44
General
-
Target
71941a88f8c895e405dd5cf665f1ef0c_JaffaCakes118.exe
-
Size
245KB
-
MD5
71941a88f8c895e405dd5cf665f1ef0c
-
SHA1
a43465af7e4eeff1205b8dd5fc102dddb0e0f512
-
SHA256
df3e901c79de60d153998a1019e3ff80c22dcd1d3a9a0fe967c9bf1360ee394e
-
SHA512
c34187c76a73482e41aac9f407350a04d7045b11c38239a57cd5ce40412eeb5743b58f0abea286d2e80e990fa98a072c600673a7e8c7ab0d53548bee12af80e6
-
SSDEEP
3072:21nS3jH1RnCnY8qlXqTWPNjRR0+K4quLAGg7oH/LSv5VHzeW9EkUEj:oALjnCY8q1kej0+K4ZL27a
Score
10/10
Malware Config
Signatures
-
Locky
Ransomware strain released in 2016, with advanced features like anti-analysis.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\71941a88f8c895e405dd5cf665f1ef0c_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\71941a88f8c895e405dd5cf665f1ef0c_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
264KB
-
Filesize
264KB
-
Filesize
8KB
-
Filesize
264KB
-
Filesize
264KB
-
Filesize
264KB
-
Filesize
264KB
-
Filesize
264KB
-
Filesize
264KB
-
Filesize
264KB
-
Filesize
264KB
-
Filesize
264KB