c047ef04e901604047ef3b8ff5a1ae3b89d8f5c9da64627de206b22bf6d6784b

Analysis

max time kernel
150s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
27/07/2024, 09:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

77a0cf5603ab1050c513f74b6b9c356c_JaffaCakes118.exe
Size

138KB
MD5

77a0cf5603ab1050c513f74b6b9c356c
SHA1

61d827c5d7a5c71a890b3c52afee18977dc07b57
SHA256

c047ef04e901604047ef3b8ff5a1ae3b89d8f5c9da64627de206b22bf6d6784b
SHA512

0373e4a507ced16f9dc0129c54ab43d276be0b4029c78d9199e19e3d486a3b25020a955f6b9b0ddb61152fdf4e04eefdb26440644d3aa7f3ffaf62afcb7dc5bc
SSDEEP

3072:/caqyte6UV77snHLLxtIyaXOqdPNbnhW4IxZx5kCZuubFrhU1wKKrONm6:/caBtC77snHR3Y7PNNW4IxZ7zbC0rONv

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	77a0cf5603ab1050c513f74b6b9c356c_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\77a0cf5603ab1050c513f74b6b9c356c_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\77a0cf5603ab1050c513f74b6b9c356c_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3064

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads