Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
29-12-2024 22:01
Behavioral task
behavioral1
Sample
JaffaCakes118_e9b403eb952af5fac5daaa17eed88305e92e6533f8ae84c98844939947672502.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_e9b403eb952af5fac5daaa17eed88305e92e6533f8ae84c98844939947672502.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_e9b403eb952af5fac5daaa17eed88305e92e6533f8ae84c98844939947672502.exe
-
Size
61KB
-
MD5
3cfd05053a371357bccd0ce42f2350fd
-
SHA1
513b8b8b015265d6a4522a6e62914d0998fbf532
-
SHA256
e9b403eb952af5fac5daaa17eed88305e92e6533f8ae84c98844939947672502
-
SHA512
e15af35b08f7260da3d0de3ff330aa3cb91a6dc33bd6a00fa54ef7a40685e557ae6f966929812d69d4815eaea71d24a446ae7b7438344c75fc64230e26f31222
-
SSDEEP
768:G3hBdh98zo8hUzAMgRt5O9hDtqCD+4yNdQiEw6ZjqZeS6R6UhSC:AdMzAzjavO9uG+NNdQ4MGQRtv
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language JaffaCakes118_e9b403eb952af5fac5daaa17eed88305e92e6533f8ae84c98844939947672502.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e9b403eb952af5fac5daaa17eed88305e92e6533f8ae84c98844939947672502.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e9b403eb952af5fac5daaa17eed88305e92e6533f8ae84c98844939947672502.exe"1⤵
- System Location Discovery: System Language Discovery
PID:1680