Analysis

  • max time kernel
    94s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11-12-2024 19:47

General

  • Target

    e2f2d1a5670d92c5a4592a519e18f45f_JaffaCakes118.exe

  • Size

    1.4MB

  • MD5

    e2f2d1a5670d92c5a4592a519e18f45f

  • SHA1

    7a4fb375b350babcadbcb113953baa0b8f616d52

  • SHA256

    4cefa282d06c25d74aaf9a1a9fe4c261c1fccc0d91e7322bd12c6a0f15b515c9

  • SHA512

    8a9771122affc32648fc50888171f03b37b4e19bef17c56b5077dbf6381d7f19233db30df2aaf1f883ba67eda714067c2a4a3737ea7038c050e1a0fc7943a4e2

  • SSDEEP

    24576:0VuHgWSR0nozWWzxtmS010IWYRhxhC3gaZfvNMVxtUiHPc9FCweEIchwNQCQLFAo:XA1wI/01nDE9vmVciv9wcchwwLFAo

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\e2f2d1a5670d92c5a4592a519e18f45f_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\e2f2d1a5670d92c5a4592a519e18f45f_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2720

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2720-0-0x0000000000850000-0x0000000000851000-memory.dmp

    Filesize

    4KB

  • memory/2720-1-0x0000000000C20000-0x0000000000D09000-memory.dmp

    Filesize

    932KB

  • memory/2720-2-0x0000000000850000-0x0000000000851000-memory.dmp

    Filesize

    4KB