Analysis
-
max time kernel
115s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
25-12-2024 18:42
Behavioral task
behavioral1
Sample
JaffaCakes118_4c755a137a593abef5904bc2d64a4c44ee8814a709736c563adb75e0b576a640.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
JaffaCakes118_4c755a137a593abef5904bc2d64a4c44ee8814a709736c563adb75e0b576a640.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_4c755a137a593abef5904bc2d64a4c44ee8814a709736c563adb75e0b576a640.exe
-
Size
188KB
-
MD5
34bc817d1ca06f61c4bff0f9c390b2c4
-
SHA1
42ce4457fdef92f65487eadfc1fbbb316936e1b9
-
SHA256
4c755a137a593abef5904bc2d64a4c44ee8814a709736c563adb75e0b576a640
-
SHA512
3d77092293d5aefe864c8f6a13641abf65b38aeaf3ba89fae359adb063f79bca1161a07526ed72e9b13c77eaf182b245593092964a458fd096fa7de75caa2a53
-
SSDEEP
3072:20Je3zkmJyKWqtud3cyeYtNFrKKbuNHPShiK7Pmvn5eJhowsvlEagID6:25HxARctYRrKKbuBPSIKjmxyJb
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language JaffaCakes118_4c755a137a593abef5904bc2d64a4c44ee8814a709736c563adb75e0b576a640.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2748 JaffaCakes118_4c755a137a593abef5904bc2d64a4c44ee8814a709736c563adb75e0b576a640.exe 2748 JaffaCakes118_4c755a137a593abef5904bc2d64a4c44ee8814a709736c563adb75e0b576a640.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_4c755a137a593abef5904bc2d64a4c44ee8814a709736c563adb75e0b576a640.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_4c755a137a593abef5904bc2d64a4c44ee8814a709736c563adb75e0b576a640.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:2748