Analysis
-
max time kernel
93s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
22-12-2024 03:28
Behavioral task
behavioral1
Sample
JaffaCakes118_d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814.exe
-
Size
184KB
-
MD5
69e3eeb9aa3ac4205af8f0f208695728
-
SHA1
6f2471893a80f549e3692774325db9f13215e5cb
-
SHA256
d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814
-
SHA512
645d640971f36cb1225eafb30e21ffc90237e95c110574c463b86784f7c6bd6158a3c28d48b1f5dc40ecd2fcb32ee1f504d9134ecfc118b88f592fb213e52b60
-
SSDEEP
3072:rXvvxUvD7nWrUZNmunEWmM2awFdCb/VXTtYAfs9c/C+LpX3:ro3MeNmgEWIawFdCbhJYA9C+L1
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language JaffaCakes118_d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 5052 JaffaCakes118_d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814.exe 5052 JaffaCakes118_d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:5052