Analysis
-
max time kernel
93s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
22-12-2024 12:40
Behavioral task
behavioral1
Sample
JaffaCakes118_7dde0fa01e53fc9f832229db1bf442d940d78a70277b1ed474f2c2bbee426de5.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_7dde0fa01e53fc9f832229db1bf442d940d78a70277b1ed474f2c2bbee426de5.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_7dde0fa01e53fc9f832229db1bf442d940d78a70277b1ed474f2c2bbee426de5.exe
-
Size
181KB
-
MD5
119703f77af17a44ce06028e63fb313c
-
SHA1
11048a3c116cdc21619a4e24c4e6ee30f7c2e25d
-
SHA256
7dde0fa01e53fc9f832229db1bf442d940d78a70277b1ed474f2c2bbee426de5
-
SHA512
7bc0ab60c228ffadba404ae39274ff2790de8a6d61fe55b70b31521abd4c1583b2a06527b8591f18a2531389e7bd19ca48e83995ae326eda7e83f46e76c8ba7a
-
SSDEEP
3072:fzQ3OUuHZyo+Y8lSnvQcq4J1hKFL8YjU/56WUX6UlyUAI7EF:7Q1fsnvdz1IFL8YK56WUX6Ub
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language JaffaCakes118_7dde0fa01e53fc9f832229db1bf442d940d78a70277b1ed474f2c2bbee426de5.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2792 JaffaCakes118_7dde0fa01e53fc9f832229db1bf442d940d78a70277b1ed474f2c2bbee426de5.exe 2792 JaffaCakes118_7dde0fa01e53fc9f832229db1bf442d940d78a70277b1ed474f2c2bbee426de5.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_7dde0fa01e53fc9f832229db1bf442d940d78a70277b1ed474f2c2bbee426de5.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_7dde0fa01e53fc9f832229db1bf442d940d78a70277b1ed474f2c2bbee426de5.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:2792