Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240709-en - resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system - submitted
27/07/2024, 07:14
Behavioral task
behavioral1
Sample
77554c6a928ee5f3b5952ecc8679fc68_JaffaCakes118.exe
Resource
win7-20240708-en
2 signatures
150 seconds
General
- Target 77554c6a928ee5f3b5952ecc8679fc68_JaffaCakes118.exe
- Size 784KB
- Sample240727-h263bswgra
- SHA256 3243448031869162d37ee7981ef2ea0c75ffef738e5b1be2645c057f0f1ebbe7
- MD5 77554c6a928ee5f3b5952ecc8679fc68
- SHA1 3e3e99a61dc82c56da258f75b52dd7dbd9d1c3a6
- SHA512 81963dc912706b1c0f9c20036e334de4edb249d9d30348bd60c32da08cdfdadc2c7526146415803421549a605e103d51b98cc8ad24fe526f2387035423f160d5
- SSDEEP 24576:SVXmeq2eWp9N1WaMbU9URBw+1sWWsu+BzP5OdlT:xeQWp9N1WaMbU9Qw+Isfb5iV
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/552-0-0x0000000000400000-0x0000000000516000-memory.dmp upx behavioral2/memory/552-2-0x0000000000400000-0x0000000000516000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 77554c6a928ee5f3b5952ecc8679fc68_JaffaCakes118.exe