Analysis
-
max time kernel
123s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
15-09-2024 02:33
Static task
static1
Behavioral task
behavioral1
Sample
e188ac27e7511681bfa2cd4a4f48e8ff_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e188ac27e7511681bfa2cd4a4f48e8ff_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e188ac27e7511681bfa2cd4a4f48e8ff_JaffaCakes118.exe
-
Size
241KB
-
MD5
e188ac27e7511681bfa2cd4a4f48e8ff
-
SHA1
0aae39b28ed88583b1b96dc68c6592aa9d3715ca
-
SHA256
9d6437c7206c23c9614b3a324dafc9f4e78219f2412ad7bbc7ac682c34f8fe06
-
SHA512
ad97641aec65bf3d0e747810279f2e3265449f787295dded7d24972eca756d6803d0931373eb1b44802ea30dd732245190ddb38803d87b6ab6faf17835619ccc
-
SSDEEP
3072:nsD2ADkpFGkTXlDJA6ba2esDetNxVgbTGV9XT4BD1mi:nplzpTVDVa2en/V6MpT8J
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Adobe = "C:\\Users\\Admin\\AppData\\Roaming\\Adobe.exe" e188ac27e7511681bfa2cd4a4f48e8ff_JaffaCakes118.exe -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language e188ac27e7511681bfa2cd4a4f48e8ff_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2KB
MD5fc6fe50e1610be084d1edfbbff4ec1ff
SHA150c2e9cb695f893a316c1d528f6968119684ec93
SHA256bc2bd850837c6351411dbb6516802968f8d7d6f0e23e2cf5a298b55d135d2ab2
SHA5123aecb0f061ea32cb100be1ad5264a3a6150c6b852750adb9e744d8344917981f06dc5a38513ba434c28c47da656e785050728534b78c4a32689e3872e88a76bf