Analysis
-
max time kernel
141s -
max time network
136s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
21/08/2024, 10:06
Static task
static1
Behavioral task
behavioral1
Sample
b30a804a018430ee3cd49ed20a526c30_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b30a804a018430ee3cd49ed20a526c30_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
CaptchaHackerMailAccsCreator.exe
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
CaptchaHackerMailAccsCreator.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Uninstall.exe
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
Uninstall.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
updater.exe
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
updater.exe
Resource
win10v2004-20240802-en
General
-
Target
CaptchaHackerMailAccsCreator.exe
-
Size
1.7MB
-
MD5
9858ff89df6779dcf18159ba9b8b19e0
-
SHA1
0ff5afc4be16da2b7ed9bcbfb0f80378a8c64d60
-
SHA256
12ab8d0ca329e85757f1451ae61fa8909aeae0fac3c16423e3ee4165fa70aac2
-
SHA512
38ea95f7119fde7ae46b5e1686d355cf55deaa7f54fa5ddffb5c48eedc48170396d8b58bea07a98bcb22dc0cea5d6c662111725d62e9fbee7ba7f1f687d9f9e8
-
SSDEEP
24576:TOxhVzbWXuenoB4+fR0EFrQp2WYoN0h1JFC6wk7JqiuYr+JaIO+iygJTU:TOxhP7RQOoNa1JFC6wk7D1f/JT
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language CaptchaHackerMailAccsCreator.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3204 CaptchaHackerMailAccsCreator.exe 3204 CaptchaHackerMailAccsCreator.exe