Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
22-05-2024 10:20
General
-
Target
66ed9720eb99c2f74d7f1bfcab323acb_JaffaCakes118.exe
-
Size
191KB
-
MD5
66ed9720eb99c2f74d7f1bfcab323acb
-
SHA1
eb11c9654c12f42186446dd3b4753af4b8e68ffe
-
SHA256
5b4162f7a3dafd6f0a84f26061339b1c26c2bde035b65311fff6c0e38895766e
-
SHA512
64d264bbc4148f912eb4ff457d8c52ffb3bde6fe7f5b44838b9660dc3b925f2971c6f94648048b5e60ffca6781adb2fbc72f1ac2a3fecf0d7ed4e56050493164
-
SSDEEP
3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0dl:HAVySV1eY4k437d+4wkTHdS2t
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\66ed9720eb99c2f74d7f1bfcab323acb_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\66ed9720eb99c2f74d7f1bfcab323acb_JaffaCakes118.exe"1⤵
- Checks computer location settings
- Suspicious use of SetWindowsHookEx