Analysis
-
max time kernel
147s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
13/08/2024, 15:54
General
-
Target
93c0bdc82d8e8dfafa94b158d51eba48_JaffaCakes118.exe
-
Size
41KB
-
MD5
93c0bdc82d8e8dfafa94b158d51eba48
-
SHA1
338d7e20b454f4d97316bb4f6a71abad74c3df42
-
SHA256
0579f93988b9e23021f49e503547232f995bd75e6bf52348ad54ccb5239f5875
-
SHA512
ba68eb17f10ac4944e661d37291867c6a5e0faa7e33aa21361e3943d231a93bcd6e7617a0ba1589f3c94982d4502510eb2dca3754cd51f0e5ac89f4ac79fe919
-
SSDEEP
768:FWDOZIJOdZNEMraJKZJO9+CvawGf8Me8Y4jaERLxLU/nZaZ:0Oakdn3eEJOoCGf8A7AZy
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\93c0bdc82d8e8dfafa94b158d51eba48_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\93c0bdc82d8e8dfafa94b158d51eba48_JaffaCakes118.exe"1⤵
- Checks computer location settings
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
52KB
-
Filesize
52KB
-
Filesize
52KB
-
Filesize
52KB
-
Filesize
52KB