Analysis
-
max time kernel
140s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
27/09/2024, 13:14
General
-
Target
fa77fb5c6e7ffc11d3fe91b430e8aacc_JaffaCakes118.exe
-
Size
66KB
-
MD5
fa77fb5c6e7ffc11d3fe91b430e8aacc
-
SHA1
b3bb480ee495e2e3ead4b8de0c89529a2b3e1a40
-
SHA256
d27d97b00dea3a8a9928055748cf70fe4f7e748fc8b57dd1ca1f5578d4fec544
-
SHA512
62d8c936a9f35b9ae1757ea08e4f304f897dc092f4ea4c2dbef71bb4484b2fc797e9a82c4305de0627694ddea6bf93bf60b0a1ea60897afbf3daa657cddee4a7
-
SSDEEP
768:FKcyMzRIVyTAAhwiRfOx3fUASAwNee2ylWXs:FKJMzRIVyfhwiRfYEUe2gW
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\fa77fb5c6e7ffc11d3fe91b430e8aacc_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\fa77fb5c6e7ffc11d3fe91b430e8aacc_JaffaCakes118.exe"1⤵
- Checks computer location settings
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
80KB
-
Filesize
80KB
-
Filesize
80KB
-
Filesize
80KB
-
Filesize
80KB