b2bcfc5ab20e4058299036dcb2c72976b667ef515610f1775eceea4e97bd6648

Analysis

max time kernel
134s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
24-07-2024 07:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6acd19cc4bdc01996f73101943226eff_JaffaCakes118.exe
Size

16KB
MD5

6acd19cc4bdc01996f73101943226eff
SHA1

c25c22b8f6ab4f4c09435b5fa8f52d25e51f2fac
SHA256

b2bcfc5ab20e4058299036dcb2c72976b667ef515610f1775eceea4e97bd6648
SHA512

cc456718edbf9fc8e4075b7d03f1f8e1e17ae924aa7c4aa29293d30979d119115436998c33bbd9cb336d4260c7935c02506c826ab56316729cdcc333768ffd19
SSDEEP

192:yQBggb9Q2bekJBqhzCIIIQlTtGSdxOjoEMIpLTn1yS9XnHSMUF8:yQ3bXykJBqhz9QhtGSdYDTQS9XHSbO

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	6acd19cc4bdc01996f73101943226eff_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\6acd19cc4bdc01996f73101943226eff_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\6acd19cc4bdc01996f73101943226eff_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4384

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads