Overview
overview
10Static
static
3c659f2d775...18.exe
windows7-x64
10c659f2d775...18.exe
windows10-2004-x64
10$APPDATA/l...60.dll
windows7-x64
1$APPDATA/l...60.dll
windows10-2004-x64
1$APPDATA/l...st.dll
windows7-x64
3$APPDATA/l...st.dll
windows10-2004-x64
3$TEMP/Stic...ud.dll
windows7-x64
10$TEMP/Stic...ud.dll
windows10-2004-x64
10$TEMP/m6_i...60.dll
windows7-x64
1$TEMP/m6_i...60.dll
windows10-2004-x64
1$TEMP/m6_i...sm.exe
windows7-x64
3$TEMP/m6_i...sm.exe
windows10-2004-x64
3$TEMP/m6_i...p1.dll
windows7-x64
3$TEMP/m6_i...p1.dll
windows10-2004-x64
3Analysis
-
max time kernel
77s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
28-08-2024 06:25
Static task
static1
Behavioral task
behavioral1
Sample
c659f2d7758ca0320907b4fab1666300_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c659f2d7758ca0320907b4fab1666300_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$APPDATA/labels/email-a-friend/_adm/51.opends60.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
$APPDATA/labels/email-a-friend/_adm/51.opends60.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$APPDATA/labels/email-a-friend/_adm/sbsiehost.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
$APPDATA/labels/email-a-friend/_adm/sbsiehost.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$TEMP/Stickinthemud.dll
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
$TEMP/Stickinthemud.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
$TEMP/m6_invoice/50.opends60.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
$TEMP/m6_invoice/50.opends60.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
$TEMP/m6_invoice/genasm.exe
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
$TEMP/m6_invoice/genasm.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
$TEMP/m6_invoice/u2lsamp1.dll
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
$TEMP/m6_invoice/u2lsamp1.dll
Resource
win10v2004-20240802-en
General
-
Target
$TEMP/m6_invoice/genasm.exe
-
Size
44KB
-
MD5
cea839e6bba49bf99a52b509d159e48e
-
SHA1
0c2b9a457a117fa1301b3df40319f3031d8fafc8
-
SHA256
b09d86e593968f6c4f9e03bba7a4cff9f714febe4e4fd5918fff4395ed12849a
-
SHA512
964db677a323fc26c62d224b771f77e5e511cb16221e4faa129f101ef8a6191e03cac4012f70faa1aec72a59a78e4733c7268d3ccf3355681633e7416ab2c437
-
SSDEEP
768:q+NZt3IP70NpPUyQqbkc40ZCOgOvd5Y1:qaU5xqbkn0Z4Ovd50
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language genasm.exe