2ac47fcaa1996c1b0234b1102dfe8f4a1ab7a43f1d8c7887658a2ee9c2b7bd9d

Analysis

max time kernel
142s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
25-07-2024 22:52

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7192c374c52f9f91a2c9f3c28fede319_JaffaCakes118.exe
Size

304KB
MD5

7192c374c52f9f91a2c9f3c28fede319
SHA1

07e490e3cf24907722b0d06813fcb94a272e1db0
SHA256

2ac47fcaa1996c1b0234b1102dfe8f4a1ab7a43f1d8c7887658a2ee9c2b7bd9d
SHA512

d0317b90bc1038a2e451622876dabec1f3a9398fe79d3d8ed032ecdd339c4a015ef3c5e512250bfce37a3c60248fc251cf7618bd4391faaefc1eff4b2174bc51
SSDEEP

6144:XX9oMWJPtzfBajslQifse6O8/1ZcJbottg5IWbBg88:H9oMgtjw4QifV6OQybmy5R

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7192c374c52f9f91a2c9f3c28fede319_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\7192c374c52f9f91a2c9f3c28fede319_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\7192c374c52f9f91a2c9f3c28fede319_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4200

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads