Analysis
-
max time kernel
92s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
16/05/2024, 16:21
General
-
Target
4bf8a527519f7ecfcc9589f662d6b8af_JaffaCakes118.exe
-
Size
135KB
-
MD5
4bf8a527519f7ecfcc9589f662d6b8af
-
SHA1
6a40789cb89cddc7124f7f2485984e4ccd2cdc4d
-
SHA256
2244d85e1917f9c7d10f52da4150170ea5176d7adc2e6fd86994a3242c138e92
-
SHA512
1c52b9172fbd2d433a70a7e06bffd5f93cde958be4d6e5e7bbdb4280fbb8d5d993f5f41d167614bb75ef4ed0a7db92cff3768a36f5f7a832148321d9fdadcf97
-
SSDEEP
1536:R1MYOnZApGVsJ+3pxuCcjpgv4vKJ0pcnSANSSsWjcdSp2Re+BizJgVmzbxdiG:RrSULypxXcR00OSVdSme+BizJ5zbxdh
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4bf8a527519f7ecfcc9589f662d6b8af_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\4bf8a527519f7ecfcc9589f662d6b8af_JaffaCakes118.exe"1⤵
- Checks computer location settings
- Suspicious use of SetWindowsHookEx