Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
18-10-2024 11:14
Behavioral task
behavioral1
Sample
572134da9f281ad26b5a7a35a4f089d8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
572134da9f281ad26b5a7a35a4f089d8_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
572134da9f281ad26b5a7a35a4f089d8_JaffaCakes118.exe
-
Size
657KB
-
MD5
572134da9f281ad26b5a7a35a4f089d8
-
SHA1
4b89fe005364270bd3222268b9929e601f33e8f0
-
SHA256
1e1cea85f78b7a5d20253bff952aaeefb6df8a5208b7b4d4e55f6dea19652852
-
SHA512
6a0207e54cf0a7c99b6e8215ad8dd6b31b00255989705c18ba9815c2152bbfbecd67ad5190a51605b2ef7d6046aba011fb8ad6323912e396b6e0aceee09fe10f
-
SSDEEP
12288:G9HwJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhukNC1r49Ek5C/W:iS1xuVVjfFoynPaVBUR8fdkNCkEB
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
572134da9f281ad26b5a7a35a4f089d8_JaffaCakes118.exedescription ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 572134da9f281ad26b5a7a35a4f089d8_JaffaCakes118.exe