Analysis

  • max time kernel
    93s
  • max time network
    145s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22-12-2024 00:08

General

  • Target

    JaffaCakes118_5785c1b5403ce12a428084c54ed27d93b6c5c0bbd8f39035cb6bd384cbe00e8a.exe

  • Size

    188KB

  • MD5

    fea7d887670af5c24abfd4854d12299e

  • SHA1

    fc3fd2f35e74055bd93a3a1f31f86e96b534884e

  • SHA256

    5785c1b5403ce12a428084c54ed27d93b6c5c0bbd8f39035cb6bd384cbe00e8a

  • SHA512

    ea413d376336656c72d49fd751d0dba03be043f8fc3caf557129665efdbf4b9cbd0c599620333821335d815953d4d4734e9ee02337a42e9b8410d920482ebe2c

  • SSDEEP

    3072:Q30vkDnhsCUJ3X6RxQwEqH66R9zwyNn9YlS4R1YkTy39quGR10+JEYTA:oy1XuF66R9zwPlPekW39qznJEO

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_5785c1b5403ce12a428084c54ed27d93b6c5c0bbd8f39035cb6bd384cbe00e8a.exe
    "C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_5785c1b5403ce12a428084c54ed27d93b6c5c0bbd8f39035cb6bd384cbe00e8a.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    PID:3136

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3136-0-0x0000000001690000-0x00000000019DA000-memory.dmp

    Filesize

    3.3MB

  • memory/3136-1-0x0000000001690000-0x00000000019DA000-memory.dmp

    Filesize

    3.3MB