Overview
overview
7Static
static
3113f59a116...18.exe
windows7-x64
7113f59a116...18.exe
windows10-2004-x64
7Launch.exe
windows7-x64
3Launch.exe
windows10-2004-x64
3MenuOrange.dll
windows7-x64
6MenuOrange.dll
windows10-2004-x64
6OIExt.dll
windows7-x64
3OIExt.dll
windows10-2004-x64
3OrangeInside.exe
windows7-x64
3OrangeInside.exe
windows10-2004-x64
3OrangeInstaller.dll
windows7-x64
3OrangeInstaller.dll
windows10-2004-x64
3OrangeInstaller.dll
windows7-x64
3OrangeInstaller.dll
windows10-2004-x64
3Uninstall.exe
windows7-x64
7Uninstall.exe
windows10-2004-x64
7english.dll
windows7-x64
1english.dll
windows10-2004-x64
1french.dll
windows7-x64
1french.dll
windows10-2004-x64
1libcurld.dll
windows7-x64
3libcurld.dll
windows10-2004-x64
3content/or...ide.js
windows7-x64
3content/or...ide.js
windows10-2004-x64
3uninstall_NSIS.exe
windows7-x64
3uninstall_NSIS.exe
windows10-2004-x64
3Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
04-10-2024 01:21
Static task
static1
Behavioral task
behavioral1
Sample
113f59a116435802d085bf18bac06953_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
113f59a116435802d085bf18bac06953_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Launch.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Launch.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
MenuOrange.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
MenuOrange.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
OIExt.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
OIExt.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
OrangeInside.exe
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
OrangeInside.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
OrangeInstaller.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
OrangeInstaller.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
OrangeInstaller.dll
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
OrangeInstaller.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Uninstall.exe
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Uninstall.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
english.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
english.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
french.dll
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
french.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
libcurld.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
libcurld.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
content/orangeinside.js
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
content/orangeinside.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
uninstall_NSIS.exe
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
uninstall_NSIS.exe
Resource
win10v2004-20240802-en
General
-
Target
Launch.exe
-
Size
149KB
-
MD5
987ff0f9aa813dcef7379a288762a3ba
-
SHA1
1fbc51fab095fbfeaa70987ba8d6720672af7bcf
-
SHA256
f9d307793ae540de348a0ca87c77536d4074a998abc1842f33d9797ba58ee52b
-
SHA512
f3d263ce13e171697f1b8c595e5f1323c4be3151708749ab6ec68f6eb6a61c0ab66e89b5d47464784776f66f6390d70cc22a52e3aa4b6e3c8191d94a7a767820
-
SSDEEP
1536:XmY5gAZTVwuhEVPcy0KoKH0Z1gjXhT4SBULZuzYfHwYQSZz+mUVG0M5kNC:2Y5gWTVwuCPc+oKtjiXAnSZz7W/M5kNC
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Launch.exe -
Suspicious behavior: EnumeratesProcesses 12 IoCs
pid Process 224 Launch.exe 224 Launch.exe 224 Launch.exe 224 Launch.exe 224 Launch.exe 224 Launch.exe 224 Launch.exe 224 Launch.exe 224 Launch.exe 224 Launch.exe 224 Launch.exe 224 Launch.exe