Analysis

  • max time kernel
    93s
  • max time network
    139s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22-12-2024 03:28

General

  • Target

    JaffaCakes118_d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814.exe

  • Size

    184KB

  • MD5

    69e3eeb9aa3ac4205af8f0f208695728

  • SHA1

    6f2471893a80f549e3692774325db9f13215e5cb

  • SHA256

    d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814

  • SHA512

    645d640971f36cb1225eafb30e21ffc90237e95c110574c463b86784f7c6bd6158a3c28d48b1f5dc40ecd2fcb32ee1f504d9134ecfc118b88f592fb213e52b60

  • SSDEEP

    3072:rXvvxUvD7nWrUZNmunEWmM2awFdCb/VXTtYAfs9c/C+LpX3:ro3MeNmgEWIawFdCbhJYA9C+L1

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814.exe
    "C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    PID:5052

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/5052-0-0x0000000001A70000-0x0000000001DBA000-memory.dmp

    Filesize

    3.3MB