Analysis
-
max time kernel
96s -
max time network
100s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
26-12-2024 22:18
Behavioral task
behavioral1
Sample
JaffaCakes118_30e381970d7211fd1b7145319c3a0d9f6090be390ab97580dccc8857650b5367.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_30e381970d7211fd1b7145319c3a0d9f6090be390ab97580dccc8857650b5367.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_30e381970d7211fd1b7145319c3a0d9f6090be390ab97580dccc8857650b5367.exe
-
Size
167KB
-
MD5
e73863b1c9a6172d0b63b67a9ae4e88b
-
SHA1
6d06951062c3418d13c69da4f27cdedcbc6c64d0
-
SHA256
30e381970d7211fd1b7145319c3a0d9f6090be390ab97580dccc8857650b5367
-
SHA512
49e032ca05a63ec65f03200ac640eb0aba6a47d373ca6650e1d7046dee58af58c1d546e4c6a9b522bceab7986ef9fada53b0c1bdc1af5f872e522cf93c1d1245
-
SSDEEP
3072:cqE8mDPMb23BHiBhn92jLzY6ZgpUZEwxF2/J0b0a+DYMIWjqwv:Fdii/EjLzYSb7TyOb0a+vz3v
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language JaffaCakes118_30e381970d7211fd1b7145319c3a0d9f6090be390ab97580dccc8857650b5367.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 372 JaffaCakes118_30e381970d7211fd1b7145319c3a0d9f6090be390ab97580dccc8857650b5367.exe 372 JaffaCakes118_30e381970d7211fd1b7145319c3a0d9f6090be390ab97580dccc8857650b5367.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_30e381970d7211fd1b7145319c3a0d9f6090be390ab97580dccc8857650b5367.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_30e381970d7211fd1b7145319c3a0d9f6090be390ab97580dccc8857650b5367.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:372