9fd0c56c017e5e2ed28f5ef8831540db0602a973ddb543d9c2adf1c5dd4d77db

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
27/07/2024, 17:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

78fea894dd7a8e628f6c7b1bd59f16f8_JaffaCakes118.exe
Size

1.1MB
MD5

78fea894dd7a8e628f6c7b1bd59f16f8
SHA1

43e5122d9fce7b39435323b2bcf27c82cc0ca6b5
SHA256

9fd0c56c017e5e2ed28f5ef8831540db0602a973ddb543d9c2adf1c5dd4d77db
SHA512

b3f2f4a4e2369a3b61ec639ead54eaf7bc1129343ef9710713da138a61f753ed8714d35031516f4fa7be3aab6958c2107f2b971050b2a949d08270d80bcdd880
SSDEEP

24576:R40Nep32IjE2mG69GG574BorcbyCzZnBroWVO:R40Mp32lxJDCX1x

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	78fea894dd7a8e628f6c7b1bd59f16f8_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\78fea894dd7a8e628f6c7b1bd59f16f8_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\78fea894dd7a8e628f6c7b1bd59f16f8_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2648

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2648-0-0x0000000000B10000-0x0000000000BAD000-memory.dmp

Filesize
628KB

Download
memory/2648-1-0x0000000002490000-0x000000000262E000-memory.dmp

Filesize
1.6MB

Download