Analysis
-
max time kernel
138s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
13-08-2024 16:16
Static task
static1
Behavioral task
behavioral1
Sample
93d310828a108c398bc37e920cfbdecc_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
93d310828a108c398bc37e920cfbdecc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/downloadmr.exe
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/downloadmr.exe
Resource
win10v2004-20240802-en
General
-
Target
$PLUGINSDIR/downloadmr.exe
-
Size
108KB
-
MD5
23066558793cc8fc9e5e34c0f76c1572
-
SHA1
5c889caedc75f6390ecfe756cc25ebb45c7974e0
-
SHA256
7b27ba9ea3f0103f9fca2850eb206d95ae128cc1263f8c2780d681c344a8febc
-
SHA512
8771628fe989b7a29f22470bf247313db8aa0346d9d534b719080e8bad1299f5e89ba9ef672741a8f412e2231f039bf41b21e67149a849d111b903920b8168bc
-
SSDEEP
1536:R5CS2GSnWmHlxmbXkW+6HyppRyhwZqql7C/qt7XHkri+dMIxg:RY3nWmHlxmbUV6aPZqql7F7Uri+Jg
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language downloadmr.exe