affb593b001bf6ec7fe061c4a232f20e42b61f7d7a4226aee5125bd14f408912

Analysis

max time kernel
150s
max time network
150s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
10/04/2024, 13:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

eb2dd4cac7768ca9b0c020b90fbcff72_JaffaCakes118.exe
Size

33KB
MD5

eb2dd4cac7768ca9b0c020b90fbcff72
SHA1

ababe0abb7355dffdd7dc8b02a641f766ae71a24
SHA256

affb593b001bf6ec7fe061c4a232f20e42b61f7d7a4226aee5125bd14f408912
SHA512

7c8d8d3b4f815ffd8acb7f74ad1617b2666846aefa150e1c451a532449e0099e9ff6782f25a2dfb975194c44e306a2632591673ae80905559a679ee66f827a6b
SSDEEP

768:m8mydAtfPj8KXJXxGz016WzS0LYONWeepd4Jqr:HtAZw2JXxGQbS01W1pZ

Score

7^/10

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Control Panel\International\Geo\Nation	eb2dd4cac7768ca9b0c020b90fbcff72_JaffaCakes118.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\eb2dd4cac7768ca9b0c020b90fbcff72_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\eb2dd4cac7768ca9b0c020b90fbcff72_JaffaCakes118.exe"
1⤵
- Checks computer location settings
PID:2108

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads