Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
18/08/2024, 03:51
Static task
static1
Behavioral task
behavioral1
Sample
a54850819bb541acfc552220a0d9042b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a54850819bb541acfc552220a0d9042b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a54850819bb541acfc552220a0d9042b_JaffaCakes118.exe
-
Size
25KB
-
MD5
a54850819bb541acfc552220a0d9042b
-
SHA1
713b5e168e8865728ff4f88fbf0f8065aaa6d812
-
SHA256
18497f67026598026bddee2f33dcd9eac4f4711142312e4144b89c1853f0dedc
-
SHA512
c9f30aacc138a8dc5302244d8a6bda3e81824080b3b32e6a53b3aa501420ded4cef13ceeba01dcf6b34e0789e02f4b05fdb36e3560c21d9a599769aa89ba2455
-
SSDEEP
384:Hcjuz+CJlxXpX5t37+qXInYDxRuvaP2XOzm63y1+0yajuEh3Dy7Iw:1+epX5J71sYDx9zmc0yajh3O7P
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\sx621 = "C:\\Users\\Admin\\sx621.exe" a54850819bb541acfc552220a0d9042b_JaffaCakes118.exe -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language a54850819bb541acfc552220a0d9042b_JaffaCakes118.exe