Analysis

  • max time kernel
    96s
  • max time network
    135s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04-01-2025 14:33

General

  • Target

    JaffaCakes118_7a3791f2ac44574cd7068681af0ce383.exe

  • Size

    181KB

  • MD5

    7a3791f2ac44574cd7068681af0ce383

  • SHA1

    9c8cec68967597e78363438a63ab3a5b162a62e4

  • SHA256

    7fcb57776b43903ab5057303b2dbee8b82bbedbb9c79590e04c6c973bdf49d85

  • SHA512

    dbe46fc6c797b70d6fc5cbd8e2f652bfb52c283dabfb985f75d90a12fd31fca6f377edb1c0208a375f875a0365a2c4011f7cb2663276bd11c78ba6d9b9666f34

  • SSDEEP

    3072:J/8kV/MNJtAsyqS0JP9EBztZjdFoxxsvLK3HqGLTUgWayQEJDx2bg9aX8ax5iZ08:Zr/MNJtAsFS0JP9EBRR8xxsvLPGLdyrv

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_7a3791f2ac44574cd7068681af0ce383.exe
    "C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_7a3791f2ac44574cd7068681af0ce383.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3156

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3156-0-0x0000000001000000-0x000000000107A000-memory.dmp

    Filesize

    488KB

  • memory/3156-1-0x0000000001000000-0x000000000107A000-memory.dmp

    Filesize

    488KB