Analysis
-
max time kernel
118s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
24-10-2024 07:38
Static task
static1
Behavioral task
behavioral1
Sample
72e5e264cb7a9d228f28d450b732b763_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
72e5e264cb7a9d228f28d450b732b763_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
72e5e264cb7a9d228f28d450b732b763_JaffaCakes118.exe
-
Size
703KB
-
MD5
72e5e264cb7a9d228f28d450b732b763
-
SHA1
725b2996377e73c04ddce0c92727883bc884012e
-
SHA256
b4b4c0fae7a62ae18d37360e9c240d6e8ef8d544670536fa24fcd73e2e95a61d
-
SHA512
56c5f673c0de529eaa4f0d153d98695feecfec50377611c33aaa762e64599f64758a49f70c040f4a7763afbf068e9f9957a52b95c4e97c5667ed966d4e7c9d4c
-
SSDEEP
12288:lwh9ZiF06LPpMSaP0WaoeVTLB4jgB8iVFjNeu7uDGZdR9dI7o/PmH4E+YgSkj1bT:w/A06CbgTHB1VFjvwGZLIU/PmHpIZ1bT
Malware Config
Signatures
-
BluStealer
A Modular information stealer written in Visual Basic.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 72e5e264cb7a9d228f28d450b732b763_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2356 72e5e264cb7a9d228f28d450b732b763_JaffaCakes118.exe