Analysis
-
max time kernel
141s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
07-12-2024 06:03
General
-
Target
d0fbddea5761662f3797a72c470c68cf_JaffaCakes118.exe
-
Size
245KB
-
MD5
d0fbddea5761662f3797a72c470c68cf
-
SHA1
f735ebcb04a9262825b8d3b7e2b09c8a52295856
-
SHA256
33d7fe688a9043fa27440f75858db865f665e8fadf309ecf61c3a28bbf9a8e91
-
SHA512
b0a3ded266353e8f91d371c933f6eac6b5c45b2a66522db3ee32456346e117c92aa4a7ecfbd494a9e81ca5e30b8324dd7e2b2d596f0db0412ebab23424791baf
-
SSDEEP
3072:i9o7klayvN1INuMI6xcjPp/63x42pEuLAGg7oH/98ootd3cTJ9wJTon2MeYkUEj:id4YINrI66PB+42l98oa3CEEVe
Score
10/10
Malware Config
Signatures
-
Locky
Ransomware strain released in 2016, with advanced features like anti-analysis.
-
Locky family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d0fbddea5761662f3797a72c470c68cf_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\d0fbddea5761662f3797a72c470c68cf_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
264KB
-
Filesize
8KB
-
Filesize
264KB
-
Filesize
8KB
-
Filesize
264KB
-
Filesize
264KB
-
Filesize
264KB
-
Filesize
264KB
-
Filesize
264KB
-
Filesize
264KB
-
Filesize
264KB
-
Filesize
264KB