Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    10-01-2025 23:15

General

  • Target

    JaffaCakes118_f0da2d4e9fb86b17d441aa151c783a63.exe

  • Size

    403KB

  • MD5

    f0da2d4e9fb86b17d441aa151c783a63

  • SHA1

    f925eca11fe1804b7aec7b1a57e580c94f6585a6

  • SHA256

    99b22b6b668ec9e90d93caa42237dfa8e37259d56d824e5ba50d97633d23ebd5

  • SHA512

    7b9e4a4248e6bd65bf69949391258dfb313c74948f3c0bf6a5f397a0892d9a6471433376c27bd04c86f786987a7fa315e6d5908533efa41e41e63931f5768bef

  • SSDEEP

    6144:SqJj3bQ/UCg7m1ugavIv1pE0EAPMrGWsWDWidF0HQszCZ2Ftppb9Y81+k7pq7FLE:Sql3k/b1ugaUS2zt

Score
6/10

Malware Config

Signatures

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_f0da2d4e9fb86b17d441aa151c783a63.exe
    "C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_f0da2d4e9fb86b17d441aa151c783a63.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2112

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads