ffde571b891c32338acad5e61c9fcadbb310cdf40c47a7bbd782e0101545ccef

Analysis

max time kernel
17s
max time network
18s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
27-07-2024 13:42

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

785d6da038c2ec330be540fdbb0e5a1b_JaffaCakes118.exe
Size

130KB
MD5

785d6da038c2ec330be540fdbb0e5a1b
SHA1

ecda4f57f2a8e758ea122befb4c87fea20e886c9
SHA256

ffde571b891c32338acad5e61c9fcadbb310cdf40c47a7bbd782e0101545ccef
SHA512

b6dd9f86592eeb2197ec8816eff4a27f4eb80e7eab79d05e6fe6eb840cc92e43a2b639d51557cf9f13822bd2b6588c5fdc31496c27054194ac10b500efd8502b
SSDEEP

3072:sEzlniVAtKZ5vQObqa4Usrit+k7LTp432oXPjYxbJvO3S0C0DH:rJ85IOMit+AVJA

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	785d6da038c2ec330be540fdbb0e5a1b_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\785d6da038c2ec330be540fdbb0e5a1b_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\785d6da038c2ec330be540fdbb0e5a1b_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2000

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2000-0-0x0000000000400000-0x0000000000426000-memory.dmp

Filesize
152KB

Download