Overview
overview
7Static
static
3a5357b0164...18.exe
windows7-x64
7a5357b0164...18.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows7-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3Jigsaw.dll
windows7-x64
1Jigsaw.dll
windows10-2004-x64
1JigsawBeac...ay.exe
windows7-x64
3JigsawBeac...ay.exe
windows10-2004-x64
3Uninstall.exe
windows7-x64
7Uninstall.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3aminstall.dll
windows7-x64
3aminstall.dll
windows10-2004-x64
3Analysis
-
max time kernel
137s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
18-08-2024 03:27
Static task
static1
Behavioral task
behavioral1
Sample
a5357b01647400c898692509e56e70e0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a5357b01647400c898692509e56e70e0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Jigsaw.dll
Resource
win7-20240729-en
Behavioral task
behavioral10
Sample
Jigsaw.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
JigsawBeachHoliday.exe
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
JigsawBeachHoliday.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Uninstall.exe
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
Uninstall.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
aminstall.dll
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
aminstall.dll
Resource
win10v2004-20240802-en
General
-
Target
JigsawBeachHoliday.exe
-
Size
2.0MB
-
MD5
6db593956cd4b1465c3bd3055e90820f
-
SHA1
016a333ffcdf75e742bc0ea05c4d41be3e96ba56
-
SHA256
c9d7823fb78db5a1918162470529ea55cae6590d2433a7872774954896b0406d
-
SHA512
27c1a0d7e3c917a55451dda77eff2ac0b88c335a5c026359636cf58384c8686a9c1e2d5660a67d4929f958162bc2c90d6b30685bf65bee85f9cc4d49ce3f9724
-
SSDEEP
24576:vSN03yz922LQa65Pis/DQ223qAvSfFg3tqzjMGrUFxj/zvfWRA//FjisdzkWGB9:40iz9Wa+6sbQ26qA4YWILj/4V9
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language JigsawBeachHoliday.exe -
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 4560 JigsawBeachHoliday.exe 4560 JigsawBeachHoliday.exe 4560 JigsawBeachHoliday.exe 4560 JigsawBeachHoliday.exe 4560 JigsawBeachHoliday.exe 4560 JigsawBeachHoliday.exe