Analysis
- max time kernel
138s - max time network
139s - platform
windows10-2004_x64 - resource
win10v2004-20240802-en - resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system - submitted
17/08/2024, 05:44
Static task
static1
Behavioral task
behavioral1
Sample
a164eb4b41ac5a169c6d0c96b7f5bdd2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a164eb4b41ac5a169c6d0c96b7f5bdd2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$0/basicscan.dll
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
$0/basicscan.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
General
- Target a164eb4b41ac5a169c6d0c96b7f5bdd2_JaffaCakes118.exe
- Size 712KB
- Sample240817-gfalkazeme
- SHA256 b35e69000c97097d1f710510049a4d3ebc8f31db782d4e1eefd79580705bbc47
- MD5 a164eb4b41ac5a169c6d0c96b7f5bdd2
- SHA1 49fe2b04aadd7fb70b8f2b1f1de07b1ff49071a1
- SHA512 fdc881d41fde922fd68985d1ec697121c43323dae9148b04a4942194c46f293a199edb45f82019e74a9101f51395fb3c768ea04a8cda1124be5fd7b40bd0a5fa
- SSDEEP 12288:pCQNAPylrL9iQ4XkNlPPqvlDaxM12JKdLu3iMz1HiMZFeRUI/fCc+sNrrf:pCQNKyqQ+k/PPKNaxM8JxPiNmACcvNrL
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language a164eb4b41ac5a169c6d0c96b7f5bdd2_JaffaCakes118.exe