Analysis
-
max time kernel
148s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
11-08-2024 14:39
Static task
static1
Behavioral task
behavioral1
Sample
8ac08f62b9afd90a34335d07723fccd9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8ac08f62b9afd90a34335d07723fccd9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8ac08f62b9afd90a34335d07723fccd9_JaffaCakes118.exe
-
Size
15KB
-
MD5
8ac08f62b9afd90a34335d07723fccd9
-
SHA1
83bc568380f16a9c5348d334fd9899f4c504e4bc
-
SHA256
6425c1a02e4894666aefca841ded5969e8f9680a4e2b1ca8ef429826a82d4b55
-
SHA512
bc4ef0e93b5d4650334a9f1d4112716f714ead6e168b8d9d130889050fb293c729066da2e06e81d63943e174aa131f95011198d53787404cadc7cb0579cf7c9d
-
SSDEEP
192:H7bRloEPcRKckFWBcEFJYsEmyzZhsIzDtk0HjQvWDWHofKizJcKaRzA:H7FloE0cckFWBjFWsbUhvbHbaeKK2R
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/1632-2-0x0000000007000000-0x000000000700A000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\bgz0ueitgy = "C:\\Users\\Admin\\bgz0ueitgy.exe" 8ac08f62b9afd90a34335d07723fccd9_JaffaCakes118.exe -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 8ac08f62b9afd90a34335d07723fccd9_JaffaCakes118.exe