Analysis
-
max time kernel
134s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
23/08/2024, 01:48
General
-
Target
b9e61dcabd3cd2e607ba208b1a479bd3_JaffaCakes118.exe
-
Size
1.2MB
-
MD5
b9e61dcabd3cd2e607ba208b1a479bd3
-
SHA1
72cc5ab4d9b6e813f626a0be31e3b1fad9dc8aa9
-
SHA256
9e24ec8e69dba7081b11c48a82e752bf598346935e9fad7ad600f2edafbf9860
-
SHA512
3f4ab804779cae740673201aefe5c261fad30fec5fce0c289861dc7f8b79d8067b4c92f78b171aa8df9ad5fc69040315cb93a8cee9d5773b7510de4026f7b114
-
SSDEEP
24576:5hMdmGyYkwUisQE7PhSj5zmjrVU1hKCK2pcRnMXUEKMM6fVx:jvZiC7zVKKEatEKMM69x
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\b9e61dcabd3cd2e607ba208b1a479bd3_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b9e61dcabd3cd2e607ba208b1a479bd3_JaffaCakes118.exe"1⤵
- Checks computer location settings
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.4MB
-
Filesize
8KB
-
Filesize
5.4MB