Analysis
-
max time kernel
123s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
25/09/2024, 12:16
General
-
Target
f5fec04f9c87894d236f36d94c046617_JaffaCakes118.exe
-
Size
47KB
-
MD5
f5fec04f9c87894d236f36d94c046617
-
SHA1
bcb91a95943caa1250450cb7f31fce295d79e9a4
-
SHA256
93d9929bd1ee8fb84f3ac6d6aafb5955c2f8a8f0cb8319b5546cdbaa8f852af0
-
SHA512
5c0aebb9ce59569c05def9f1786f8053a7a79f0ea9807f1f6db6bebf8eb34b547298005103ebd249904a9809404e3e1cbc3e2524ed7cc17e23c86bcdbc58f7e7
-
SSDEEP
768:WQmFXYDHFlVD20CbDhN5GcF0juVA8IBwV4qgDC/39h:WQSoDHbVDg7UfjuVlhVh
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of UnmapMainImage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f5fec04f9c87894d236f36d94c046617_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f5fec04f9c87894d236f36d94c046617_JaffaCakes118.exe"1⤵
- Checks computer location settings
- System Location Discovery: System Language Discovery
- Suspicious use of UnmapMainImage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5f242ab1198d7ac959e0c651d7117472e
SHA150875943350f99eeb01501261d476ba67fa0e293
SHA256b8673d414425e0e867434960b9a6252442c17bcccb6bbe57393ceeddf286254e
SHA512705ba5f9ede97b07fc0a1516e574da5dd2df930ebbbf834887148269e723d942b3a8e04457d429260c9a27c38378fea46df11c5c1f63ade8b5f4a9550c55378c
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
60KB