43f483f7c47f897582335b19160bce0f0d424796993fa1d73433dc3dff8d8b8f

Analysis

max time kernel
148s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
26/07/2024, 02:38

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7249911551244864481820e85f368dac_JaffaCakes118.exe
Size

44KB
MD5

7249911551244864481820e85f368dac
SHA1

a1b34848f0778b834d33730546250155659ee3cd
SHA256

43f483f7c47f897582335b19160bce0f0d424796993fa1d73433dc3dff8d8b8f
SHA512

ebbaa254b8296aa897bcaa2a3db21a03a7c3ef271251dd492172fe417b3a4e7edc5293b85659ebf22afa0a0c8ff0c399df8290366227cce31fdfcd25ae566abd
SSDEEP

768:1Kqcf47DsyKGf2pbi8PkvQaZsi/5F66snhz2j0XFJ+O2nWVwwl3W:1KdcDs7pPSZPu6oz2jyFQb4wwlG

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7249911551244864481820e85f368dac_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\7249911551244864481820e85f368dac_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\7249911551244864481820e85f368dac_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2960

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2960-0-0x0000000000400000-0x0000000000424000-memory.dmp

Filesize
144KB

Download