Analysis
-
max time kernel
135s -
max time network
109s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
13/05/2024, 06:33
General
-
Target
3e291dcba65ef6361f105f012a88f603_JaffaCakes118.exe
-
Size
191KB
-
MD5
3e291dcba65ef6361f105f012a88f603
-
SHA1
ab536ccbbc87efdb72eb639d2d0d12237220e983
-
SHA256
b063d5b58d5ca82dd721140914a690b04ad8e25f7d38d52a91bf69febd4470b0
-
SHA512
c05725a1107f78326f0ecc39de1cffc1ae3777bb44689984c907e3ba6b8eb1a5cadcdb36f291c4dda7037d9480d87bfde89d514b236d652e461f44f545a83840
-
SSDEEP
3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0dk:HAVySV1eY4k437d+4wkTHdS2jI
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3e291dcba65ef6361f105f012a88f603_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3e291dcba65ef6361f105f012a88f603_JaffaCakes118.exe"1⤵
- Checks computer location settings
- Suspicious use of SetWindowsHookEx