Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240611-en - resource tags
- submitted
13/06/2024, 11:40
General
- Target a558f6c9ab11b21d4aaeca4f9e3c7703_JaffaCakes118.exe
- Size 191KB
- Sample240613-ntaxtaxblb
- SHA256 60358ae1b75f8f16d6406b2a6f3b15acc47a4e1654797bd6e414b98940ba140f
Score
7/10
Malware Config
Signatures
- Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a558f6c9ab11b21d4aaeca4f9e3c7703_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\a558f6c9ab11b21d4aaeca4f9e3c7703_JaffaCakes118.exe"1⤵
- Checks computer location settings
- Suspicious use of SetWindowsHookEx