Analysis
-
max time kernel
24s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19/09/2024, 04:23
General
-
Target
ea939a7c182bebe2a235a70b2dd6c8cf_JaffaCakes118.exe
-
Size
382KB
-
MD5
ea939a7c182bebe2a235a70b2dd6c8cf
-
SHA1
bafe1f3584414b6de2b85d51a6101a3b347e6a67
-
SHA256
922490b1f76f6a6823b1ff4aa9d60793fdf16490cf783a7372c59a3871ee8620
-
SHA512
453e5c6d114839c585af692683cd74a00f95183768a3569ef1f06631a876ddc3cec3b410d438a2f97d1c9b34907606bca5dca4883773faeefc68536d5f44bfd9
-
SSDEEP
6144:8XfscCnSI5LfyQVDg7XNpSFBiPlkPGrSCapQU3dT4FU2gEX+V7fRwBl2:+LCSI5LhVcJwFTO2CaiU2zXq75wP2
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Drops file in Program Files directory 3 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ea939a7c182bebe2a235a70b2dd6c8cf_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ea939a7c182bebe2a235a70b2dd6c8cf_JaffaCakes118.exe"1⤵
- Checks computer location settings
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
416KB
-
Filesize
416KB
-
Filesize
416KB
-
Filesize
416KB
-
Filesize
416KB
-
Filesize
416KB
-
Filesize
416KB
-
Filesize
416KB
-
Filesize
416KB
-
Filesize
416KB
-
Filesize
416KB