Analysis
-
max time kernel
129s -
max time network
98s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
27/05/2024, 08:48
General
-
Target
78929befc24a12f8fa1f92c1dd42a18c_JaffaCakes118.exe
-
Size
191KB
-
MD5
78929befc24a12f8fa1f92c1dd42a18c
-
SHA1
a0addd4abbcfb520f843e6c14366b26b90744f1e
-
SHA256
3a011563d10a3951e57b41d017390e633a644281add1e4d0b84da0837a64bd09
-
SHA512
f0401235d0dd95ef9bdc1599ef16e092bbcc1b084856009c3d8ad8f9f4c25b0bb60b87398c247e08aed1b3208c9569720737f7d9ddc9a69da86d904576cbde79
-
SSDEEP
3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0dH:HAVySV1eY4k437d+4wkTHdS2v
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\78929befc24a12f8fa1f92c1dd42a18c_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\78929befc24a12f8fa1f92c1dd42a18c_JaffaCakes118.exe"1⤵
- Checks computer location settings
- Suspicious use of SetWindowsHookEx