Analysis
-
max time kernel
130s -
max time network
101s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
21-05-2024 19:29
General
-
Target
647ccae6ece29e5756bf2976502ba2f5_JaffaCakes118.exe
-
Size
191KB
-
MD5
647ccae6ece29e5756bf2976502ba2f5
-
SHA1
a8e70ad90dcb710a4e3039898f5e93e4d5e95872
-
SHA256
b1ad7f95530a87854f250bbe0075fae539ce5f5c45710c652f7addc401d852a1
-
SHA512
593be63139da3ca4c273c5542237d85b517ffbc6ebbeaa05844130843b0777dcb39ed15b5dcef92171126ee8a63f28619e11509c78d4a55dda0dd24864dea854
-
SSDEEP
3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0de:HAVySV1eY4k437d+4wkTHdS2m
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\647ccae6ece29e5756bf2976502ba2f5_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\647ccae6ece29e5756bf2976502ba2f5_JaffaCakes118.exe"1⤵
- Checks computer location settings
- Suspicious use of SetWindowsHookEx