Overview
overview
10Static
static
10JaffaCakes...bb.exe
windows7-x64
10JaffaCakes...bb.exe
windows10-2004-x64
10is155016.exe
windows7-x64
3is155016.exe
windows10-2004-x64
3setup_akl.exe
windows7-x64
10setup_akl.exe
windows10-2004-x64
10$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3AKV.exe
windows7-x64
3AKV.exe
windows10-2004-x64
3HTV.dll
windows7-x64
3HTV.dll
windows10-2004-x64
3HTV.exe
windows7-x64
6HTV.exe
windows10-2004-x64
6HTV.dll
windows7-x64
3HTV.dll
windows10-2004-x64
3HTV.dll
windows7-x64
3HTV.dll
windows10-2004-x64
3HTV.chm
windows7-x64
1HTV.chm
windows10-2004-x64
1HTV.exe
windows7-x64
6HTV.exe
windows10-2004-x64
6Uninstall.exe
windows7-x64
7Uninstall.exe
windows10-2004-x64
7qs.html
windows7-x64
3qs.html
windows10-2004-x64
3Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
26-01-2025 12:31
Behavioral task
behavioral1
Sample
JaffaCakes118_3580f87fe087994c3fb1f52353e8e9bb.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_3580f87fe087994c3fb1f52353e8e9bb.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
is155016.exe
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
is155016.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
setup_akl.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
setup_akl.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20241010-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
AKV.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
AKV.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
HTV.dll
Resource
win7-20241010-en
Behavioral task
behavioral12
Sample
HTV.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
HTV.exe
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
HTV.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
HTV.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
HTV.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
HTV.dll
Resource
win7-20241023-en
Behavioral task
behavioral18
Sample
HTV.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
HTV.chm
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
HTV.chm
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
HTV.exe
Resource
win7-20241010-en
Behavioral task
behavioral22
Sample
HTV.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
Uninstall.exe
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
Uninstall.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
qs.html
Resource
win7-20241010-en
Behavioral task
behavioral26
Sample
qs.html
Resource
win10v2004-20241007-en
General
-
Target
AKV.exe
-
Size
395KB
-
MD5
b8fa30233794772b8b76b4b1d91c7321
-
SHA1
0cf9561be2528944285e536f41d502be24c3aa87
-
SHA256
14116fa79ccc105fabd312b4dff74933f8684c6b27db37e5e3a79d159092d29a
-
SHA512
10ce8b18e7afb8c7e30bb90b0a1f199ef0b77873fa7a9efc596606e151be6b516c0ec6222a9032bdcc527e80964f53d20a28fa1881a08b4df303b2e28204549d
-
SSDEEP
6144:qXXNW/g8zSQbXumJZwsP2IUPNF/GVx8MFC:+XbySQjuG/P2bd
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language AKV.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2016 AKV.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2016 AKV.exe