c0f8a46022b6c9568b2457d8e0840924d6fdc566738fb4f247658e676c1a1103

Analysis

max time kernel
117s
max time network
119s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
27/07/2024, 00:32

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7662a6f75038e4f965054f79f1762c8d_JaffaCakes118.exe
Size

531KB
MD5

7662a6f75038e4f965054f79f1762c8d
SHA1

9d291b86b2441ffc15cef520c57c16161ef2e4c7
SHA256

c0f8a46022b6c9568b2457d8e0840924d6fdc566738fb4f247658e676c1a1103
SHA512

8a98f2fad200baf7783e5cd77a1c57f1eda3fb97d002f0232dfd281d0d1223439b22523c4b2fba9cd9208e3f748f0d1908d2fd8cee6a33abd46f2d7844e6d18e
SSDEEP

12288:Q3Wmjf5uRwUZUNjmgITIRcCrlKFMsnu7PYWc4Ha+:mXf5y2jmgITINGMpFa+

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7662a6f75038e4f965054f79f1762c8d_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\7662a6f75038e4f965054f79f1762c8d_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\7662a6f75038e4f965054f79f1762c8d_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2276

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2276-0-0x00000000009E0000-0x0000000000AE2000-memory.dmp

Filesize
1.0MB

Download
memory/2276-1-0x0000000000020000-0x0000000000023000-memory.dmp

Filesize
12KB

Download
memory/2276-2-0x0000000000020000-0x0000000000023000-memory.dmp

Filesize
12KB

Download
memory/2276-3-0x00000000009E0000-0x0000000000AE2000-memory.dmp

Filesize
1.0MB

Download