Analysis
-
max time kernel
91s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
28/09/2024, 16:26
Static task
static1
Behavioral task
behavioral1
Sample
fcb0d90ba7d5ab86447b9e6e75e66456_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fcb0d90ba7d5ab86447b9e6e75e66456_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fcb0d90ba7d5ab86447b9e6e75e66456_JaffaCakes118.exe
-
Size
256KB
-
MD5
fcb0d90ba7d5ab86447b9e6e75e66456
-
SHA1
10f38316415dcfeca9b3e38db839933b9d400b32
-
SHA256
240cd250545fd5b3fb1068dfbf0efeda7d1bcc36de2d4b364949367279f8c52d
-
SHA512
5fb2abf893ac7e67340fbf99e7d7b1bf84d4efabc75303868d0de5f899f4aa7675fc8f7fa043051b8063ce4fb13bbac48a5bd3a29303d08ae90652f059d64c17
-
SSDEEP
6144:izB79sF3Z0zlKYcLJ45ZdQTFhR1Mx6gtZTt8:u4VLJSdQTFhosgtZTt8
Malware Config
Signatures
-
Drops file in Windows directory 1 IoCs
description ioc Process File created C:\Windows\Tasks\IronKeep.job fcb0d90ba7d5ab86447b9e6e75e66456_JaffaCakes118.exe -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language fcb0d90ba7d5ab86447b9e6e75e66456_JaffaCakes118.exe