Analysis
-
max time kernel
96s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
13/10/2024, 13:01
Static task
static1
Behavioral task
behavioral1
Sample
3fff06276b8b7b34192f4d3e8411aa58_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3fff06276b8b7b34192f4d3e8411aa58_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3fff06276b8b7b34192f4d3e8411aa58_JaffaCakes118.exe
-
Size
261KB
-
MD5
3fff06276b8b7b34192f4d3e8411aa58
-
SHA1
068af9d8a1242390d8130aa04487051e7f7a3f11
-
SHA256
69ee97162deeda4e1670c79b080941dfeb93b2e5248c486487739fb33c861089
-
SHA512
b4b54f7130f1251950d7bce5d08db40ac02922cb9acf128dbc3d4598f8d2e7fb5fefd4a40ff46556aed37c8cb1a69651201b47d5dcfcb5c40a3bbb3ba3433454
-
SSDEEP
3072:AxkePN3+a26pF/PFbbkk6PQKI3abogg+PG2VgRTtvnXislXMqUoJiLuyCAJeuK4h:21ZaRpG26jdIzuyCI9K8r2Cf
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\585a51445d47411b504d50 = "C:\\Users\\Admin\\qhrt.exe" 3fff06276b8b7b34192f4d3e8411aa58_JaffaCakes118.exe -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 3fff06276b8b7b34192f4d3e8411aa58_JaffaCakes118.exe