c65e3d9912782986acd5cc977114cf724b3d6e6fdf66ee3f3e0cdc2ca02eae99

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
24/07/2024, 07:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
6aaf6a1c880a640ede8d01c25356bb4f_JaffaCakes118.exe
Size 250KB
Sample240724-hx987atepl
SHA256 c65e3d9912782986acd5cc977114cf724b3d6e6fdf66ee3f3e0cdc2ca02eae99
MD5 6aaf6a1c880a640ede8d01c25356bb4f
SHA1 ed11e7fbf411ce3e60109a0d957658de11b1a67c
SHA512 efe9deea40efe6e3a040057eead3c69e8083d781998ad0af6ab58ab03530fa7bbdabdd3fa3a6ef448f3eb8679cd480d14750d581533e5311ee00a2cf785b0856
SSDEEP 6144:3Sh7vS15CFJDv+CzqxXmbBrT/AiEq53qJeBwgdB8oisQmVkM:3SF28TPJ/A+AAndBUHM
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 3 IoCs

pid	Process
1756	6aaf6a1c880a640ede8d01c25356bb4f_JaffaCakes118.exe
1756	6aaf6a1c880a640ede8d01c25356bb4f_JaffaCakes118.exe
1756	6aaf6a1c880a640ede8d01c25356bb4f_JaffaCakes118.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	6aaf6a1c880a640ede8d01c25356bb4f_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\6aaf6a1c880a640ede8d01c25356bb4f_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\6aaf6a1c880a640ede8d01c25356bb4f_JaffaCakes118.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1756

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

_Setup.dll

Path C:\Users\Admin\AppData\Local\Temp\6A45C8B4\_Setup.dll
Size 121KB
SHA256 6748440b7bbe1c94da254d33cdb256322c30f57be00a70d940263103df451c62
MD5 9d93f2fca8154bac0b7c7b1b29fed2e7
SHA1 be928496444a433009494404f56b6843c039eb04
SHA512 234f1f763daa50280073749e5b92052c2ea8b7163f4f90fcc8c1aed7d2ef44dac5f0e5e7e1d3bc5c30b2119c81ab5e81f6e3518b2fe25255b427d965cc32653b
SSDEEP 3072:hRKZmYOqayjztaqt6t2NbpmO9a1CrnPm1AN77z2m8yzZ2UvdGEbUuL5uzYvXzjcX:hUmZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

_Setupx.dll

Path C:\Users\Admin\AppData\Local\Temp\6A45C8B4\_Setupx.dll
Size 21KB
SHA256 ed01ebf124a381cb6817e27c8ffed0f2866ebffe45d130ef89a69858895e10f2
MD5 1e0ff78cc033cd0c24c6910fc66c796b
SHA1 8f88bb67a4ca3cfed40a0919dbe28558a3f026e2
SHA512 0219b1e6bd43a5b5e8749eb47fa702874d45efb03471d96f7d7935bdd6aafd28574bfe236766669315879453431064b92917a14f4042001e2257d159d7c841a7
SSDEEP 384:5SXKYvLcZy6Q5BdAXLc7zYt+SLNIx2Y76NanW8r7EmnU4WaeFPRurDu:sVL8UBW+Y+ShjY76kPnsnPRue
MD5 SHA1 SHA512 SSDEEP

Submit Download

Tsu-06DC.dll

Path C:\Users\Admin\AppData\Local\Temp\Tsu-06DC.dll
Size 248KB
SHA256 d1c6caca7e52bc4228e5177ebe8d1a4133f8ccde9db5bab882512c1b74add18d
MD5 961bab6d3b9d50e12b40f724943b5c0d
SHA1 90cd69057be30e44f77fe5c2e0bd38f42886a1b3
SHA512 bde1a35be017a07f06ee3b40de48aaa557b2274a53f0fdda392c5d874f9fc0dcce98b589e5be62be072ef2f6ceda92c8f072d11c3b18d888285c517d9c3c8f9e
SSDEEP 3072:3OqLADE2hfUhnECRH+TKT2GCoMJP6/JGq2VH3utiQWJ/3QCTrCImtsBodwIICDrS:eNtBIQTKKwM8BGduvY3BCaedH4y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads