Overview
overview
7Static
static
30088700da7...18.exe
windows7-x64
70088700da7...18.exe
windows10-2004-x64
7$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDIR/pwgen.dll
windows7-x64
3$PLUGINSDIR/pwgen.dll
windows10-2004-x64
3Launcher.exe
windows7-x64
3Launcher.exe
windows10-2004-x64
3Analysis
-
max time kernel
94s -
max time network
98s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
30/09/2024, 09:10
Static task
static1
Behavioral task
behavioral1
Sample
0088700da709665876970dff89fde830_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
0088700da709665876970dff89fde830_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/pwgen.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/pwgen.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Launcher.exe
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Launcher.exe
Resource
win10v2004-20240802-en
General
-
Target
Launcher.exe
-
Size
104KB
-
MD5
e15260f451daa123d1dbf5025c823feb
-
SHA1
bdd912b784bab2a11dd3977af30af8e123790143
-
SHA256
29d83768563ded1f2184ce21c8d0b3cad00b05696996d094a624742a81b7133b
-
SHA512
4b10c2fe5fc881b1289d546c9fb5ea3a76d5409864cbb066c43fc38de2de0eff76a816f7c6e43275de88a79103494dc1fa8aac644a006ae271e570c340bae5b0
-
SSDEEP
3072:pVwXLwtFkcyzUtVFTiOf32VvoCQti/eHRO:40tOcyzUPfmVv1KR
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Launcher.exe