Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
03-07-2024 16:53
General
-
Target
231c6a65e6741739dbc1347d6d94d910_JaffaCakes118.exe
-
Size
47KB
-
MD5
231c6a65e6741739dbc1347d6d94d910
-
SHA1
b8a7b6c642b3cfb2934f1e6b7ba02f47a6cba697
-
SHA256
872d440acf015bb07c08dec2ae8b44a48216ea4b71a9cea24659c5eb982759a8
-
SHA512
e1ef027f84bd4b1d37fac1268f0bd070a12141f27c3df68e31825ade0df0a21909be3fd85bd2a110c77712eb487274535822dfe52a2890c9b620d0cbe25679f6
-
SSDEEP
768:AMMPB3k+qptzMa7E9+mMpsPqO8qg8rzUSDMP0kD7gmQcnmEpDR7cZTx68l8/jXTJ:AM9tz/7EIm2Z8fUp0kDUmQcmAD8T8G8Z
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of UnmapMainImage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\231c6a65e6741739dbc1347d6d94d910_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\231c6a65e6741739dbc1347d6d94d910_JaffaCakes118.exe"1⤵
- Checks computer location settings
- Suspicious use of UnmapMainImage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
60KB