Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22-12-2024 04:23

General

  • Target

    JaffaCakes118_e2ea8a2661c26d04b6d2c6aae48916ef5d5f5e627cc46e763c766c81ad3f5ee6.exe

  • Size

    188KB

  • MD5

    4458c25ecb86a974e96aeb74036d15ca

  • SHA1

    862de6c03ac68c47b0a5e8cf31e53744a3a902a8

  • SHA256

    e2ea8a2661c26d04b6d2c6aae48916ef5d5f5e627cc46e763c766c81ad3f5ee6

  • SHA512

    19446c4ba2d5e31d73fd6ae1080ab154c441366d1e65582bf8b0a796d29a2935c16f18c4b6f52efb72c324e4260649c7610a22e9a290a0ce2206442946f43e0d

  • SSDEEP

    3072:yLcEu0HNdOMU3AlIhanjr1B6hUVHvCtfkgjBCa1ci9LKeA:t0t6AlEanjr36hUVHvCqIAsxKe

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2ea8a2661c26d04b6d2c6aae48916ef5d5f5e627cc46e763c766c81ad3f5ee6.exe
    "C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2ea8a2661c26d04b6d2c6aae48916ef5d5f5e627cc46e763c766c81ad3f5ee6.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    PID:4860

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4860-0-0x0000000001470000-0x00000000017BA000-memory.dmp

    Filesize

    3.3MB