12c2e8a0d288c41a35f32bc9b93039402122517449a571882de252dd46e17da0

Analysis

max time kernel
140s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
22/08/2024, 15:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b83a62c59aa738cb8e38c701b396ac1c_JaffaCakes118.exe
Size

1021KB
MD5

b83a62c59aa738cb8e38c701b396ac1c
SHA1

fae19db0d7a6a18be1239163d963e35e20022f20
SHA256

12c2e8a0d288c41a35f32bc9b93039402122517449a571882de252dd46e17da0
SHA512

e3ec8a5251c02868663e7eed9257b218a64a79dbbb91588fed68722caa7ca748ba490de673df3545a0b22684c074e7d1de374d59f1bed179ab7e1b95896f05cb
SSDEEP

12288:Vl83H/PamYLOOblvmkiei/wwmR/k4Og/rBeYZFdtW5NtkbgyjHfvFKzHoWJIz34+:efPeOAIwFTtFvW5AbgyjHnHtTcz6

Score

3^/10

discovery

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	b83a62c59aa738cb8e38c701b396ac1c_JaffaCakes118.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1368	b83a62c59aa738cb8e38c701b396ac1c_JaffaCakes118.exe
1368	b83a62c59aa738cb8e38c701b396ac1c_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\b83a62c59aa738cb8e38c701b396ac1c_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\b83a62c59aa738cb8e38c701b396ac1c_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:1368

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\ish240610718\bootstrap_37684.html

Filesize
156B

MD5
1ea9e5b417811379e874ad4870d5c51a

SHA1
a4bd01f828454f3619a815dbe5423b181ec4051c

SHA256
f076773a6e3ae0f1cee3c69232779a1aaaf05202db472040c0c8ea4a70af173a

SHA512
965c10d2aa5312602153338da873e8866d2782e0cf633befe5a552b770e08abf47a4d2e007cdef7010c212ebcb9fefea5610c41c7ed1553440eaeab7ddd72daa

Download Submit
C:\Users\Admin\AppData\Local\Temp\ish240610718\css\main.css

Filesize
5KB

MD5
653b1d4b5b7bfc5032a9599ab11fb2a5

SHA1
8b0aab9cab6782cf0513120ecbff95e46055e7c1

SHA256
38df0169aa16fbfd0c22dbd51274b890e21b6d371f3babff323d53dc35a11fd3

SHA512
a6feea252e720965154964790fb772eaa7b97567bee46c1df68af439fe9280013f7d156407ddba8faa29fd5c58efa4c1e6509f0500b849e0a173149ac1ea6895

Download Submit
C:\Users\Admin\AppData\Local\Temp\ish240610718\css\sdk-ui\progress-bar.css

Filesize
506B

MD5
5335f1c12201b5f7cf5f8b4f5692e3d1

SHA1
13807a10369f7ff9ab3f9aba18135bccb98bec2d

SHA256
974cd89e64bdaa85bf36ed2a50af266d245d781a8139f5b45d7c55a0b0841dda

SHA512
0d4e54d2ffe96ccf548097f7812e3608537b4dae9687816983fddfb73223c196159cc6a39fcdc000784c79b2ced878efbc7a5b5f6e057973bf25b128124510df

Download Submit
C:\Users\Admin\AppData\Local\Temp\ish240610718\images\BG.png

Filesize
22KB

MD5
20633a7c3ad6d9349fcea90618768c6f

SHA1
cc7c37c3d04e01a218af4a4174bd8a4a1c2cca25

SHA256
26a340d3a48857ec755faf23b7d8f2614edb98f3585ea0ca69a19da1cbb94704

SHA512
53d70ed2860ca27a2aaafb03381acde6082dce9af1cf03c752ad6c6a349a7f59103ac87bd07ead1ff8e4abb13aa995fcdb35f0616d263bea4b045afe9535575f

Download Submit
C:\Users\Admin\AppData\Local\Temp\ish240610718\images\close.png

Filesize
322B

MD5
5b97212a9d8ad0865531c4941e20bde6

SHA1
61a0c546e8c2ac403ac2dc20587173c8e1418ffe

SHA256
d78b9e6c8cb83728615c7664d95dd2c3f11afd7bb4c382b0388ace743e2305af

SHA512
5ef7b48c1a543b370b9957a20821f802f5578bda83a4aa4ab6a8cb47d465da31fee9b2de709a439245d8526b337c35c0738f2f7ce6122da9e9600d25a3f84ab5

Download Submit
C:\Users\Admin\AppData\Local\Temp\ish240610718\images\color_btn.png

Filesize
753B

MD5
1d355763888440e1bf715cac79f74ef6

SHA1
55e535b136c6fceb7ade0f7d151624aa96afd2c5

SHA256
35ea6c3c762385aeae9f5318a1f84375c906b05079bb738b765a42388feb6c49

SHA512
74a2862fbd369aaa5400bd4bc75a3bc4c4689bfae9dafab1f220f9127509a234ac0587a31b84147ab7a775272e0377bbf469964c11dacbf721c45a30492aef11

Download Submit
C:\Users\Admin\AppData\Local\Temp\ish240610718\images\grey_btn.png

Filesize
614B

MD5
c8c780a3ec7f36b9ae05e61752cc181e

SHA1
560b6e6988f1ae4704416e6e266963e4e9950188

SHA256
c1007ad61bccf7dbfdd0b1f22c53423e744e431fc7eb99e07c3560f0ea20682a

SHA512
cb1884a535d0dda494258292cca54a7272c4a0ece8784c28c094ac1d201930ce97fb1fdf14dc8f535e59199d4bc964a4121efa1584b4b777b726985d3dcda2f7

Download Submit
C:\Users\Admin\AppData\Local\Temp\ish240610718\images\loader.gif

Filesize
7KB

MD5
edb71146254d3b8ebae18607e801398c

SHA1
8775027da6f6cc19c72d20c7f1615a01112e5d3c

SHA256
3e3610a947c3c6ced9971d16d4231ee3699f71f404894da4ce39090a8170c71a

SHA512
4eb29933fcaed8ad368309377bdcf69cb4e9f469d0c882d5ddd2fa3b0723d0ced29480ec024cab44b86b737351d49471d58601b121bb380079c5c696164f8d20

Download Submit
C:\Users\Admin\AppData\Local\Temp\ish240610718\images\pause_btn.png

Filesize
461B

MD5
48db0a8b2ffb2e065893a768882a7ceb

SHA1
170dfe44bf252343fddad3b45dd0673c2e7ae635

SHA256
6600b196e680fe7e68464fb03d0283f0c3dca915acb328a2933072bc38755892

SHA512
f354ca7b682e945533971a8a0aca842405625638a3b612e835193f395f850ca4ae669c028e63ca32502c7054b30dd86870b7ec014c2afeb0ddad2f25cc4bb808

Download Submit
C:\Users\Admin\AppData\Local\Temp\ish240610718\images\progress.png

Filesize
249B

MD5
aa21d08bebaaa9a8ad4eaa07e7acc7f1

SHA1
f6dfe9218347b6724a4c437326a23b7b5ef6a26b

SHA256
174f5f673d324cf79235e265a99d6af57c6a181336de7941e0a2bd02d6c8a19c

SHA512
7606bd0465fec1f8e671e19652d97e0ebb3305938b761ee6797e71108f557ba30f6e5ce8ccfd69591f8f4a24391b620ee530567dcdcbfcbdfaaf67d07689a428

Download Submit
C:\Users\Admin\AppData\Local\Temp\ish240610718\images\progress_bar.png

Filesize
297B

MD5
c023746db5223d69e882274ecf7ceec2

SHA1
dc96b3b697782a8fef2a224ff1b8127e3c6f8ded

SHA256
eb33cc6256f3e09ddc74b4cb4f318e2b5b66d7aa17498fca2ad2e6ef88183262

SHA512
7df40a0bd67fcb945d97ed42b82acb98d6effdf57786013d2a035817937bd04251f878c924237fb9353a16807f95019b4de650ac8b07c1b5f78069eaed4d0a67

Download Submit
C:\Users\Admin\AppData\Local\Temp\ish240610718\images\resume_btn.png

Filesize
694B

MD5
486f87357936385fdd4cea6687a1dd48

SHA1
3c46febc4f1750319bba0d24afd93d9ce81e7fee

SHA256
e227f2d334164b685eb3644cca6ede68b2e80a22b153e9b3c71d1a1795e484a6

SHA512
f1647f028a0c2504244d5294021ee4bd03818cc481baac3542459df637256fc0b4c8b79d2c0acb106de7ac92ccef9d38b1037c9c640e8b68c2cff14487b0d7da

Download Submit
C:\Users\Admin\AppData\Local\Temp\ish240610718\images\welcome_prod_box.png

Filesize
375B

MD5
d068ae67dab5294d4d4a8483f530580b

SHA1
47a248d05c0da33937f4881521382db4634f1c06

SHA256
5a5a5d2acb4172d045762acbde33ccb35b96f347eeebfd3e0f4713b8d24a0505

SHA512
0fcfa96b0f6ff303e912ba61d7621dd31f3759e6d816bb8cd43bbb28b07d24e6d2ed9d8eae3e6bd81fdc35a3456c57f4712b26b634c8b40dd3f2f020b10c1df0

Download Submit
memory/1368-0-0x0000000000401000-0x00000000004C6000-memory.dmp

Filesize
788KB

Download
memory/1368-7-0x0000000000400000-0x0000000000508000-memory.dmp

Filesize
1.0MB

Download
memory/1368-139-0x0000000000401000-0x00000000004C6000-memory.dmp

Filesize
788KB

Download
memory/1368-140-0x0000000000400000-0x0000000000508000-memory.dmp

Filesize
1.0MB

Download