Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
26/07/2024, 17:18
General
-
Target
74fe0fddd925eca4d70050eea3eb9d49_JaffaCakes118.exe
-
Size
81KB
-
MD5
74fe0fddd925eca4d70050eea3eb9d49
-
SHA1
152a19aefdda70aedb7e8886e70d9782ed217f29
-
SHA256
a2e2e90797fc376391c010bc6480b2a30f8f15bdd7350ebdd3f79c82b48f98b6
-
SHA512
71b3a43f57bb2ee1ec79e703e642474de8f0969a0f2b2e9a977732eabb2a54e29d87beb910918a5336f30d754278a6b0c81c90351af0c420a3a40637efe0d889
-
SSDEEP
768:XI1JZbxR2OjXwSP7btrKYKRb7YELnupXt9XzcfTF:XCZRXw27UYWb7jLwjAr
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\74fe0fddd925eca4d70050eea3eb9d49_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\74fe0fddd925eca4d70050eea3eb9d49_JaffaCakes118.exe"1⤵
- Checks computer location settings
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
96KB
-
Filesize
96KB
-
Filesize
96KB
-
Filesize
96KB
-
Filesize
96KB