0d885e0a343e8ab00d98724224b9a51a323b7916842706413efb307c3f15fa7b

Analysis

max time kernel
93s
max time network
95s
platform
windows10-2004_x64
resource
win10v2004-20240730-en
resource tags

arch:x64arch:x86image:win10v2004-20240730-enlocale:en-usos:windows10-2004-x64system
submitted
01-08-2024 20:50

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

81c26631097ac2bf2e824dae818bf6e1_JaffaCakes118.exe
Size

20KB
MD5

81c26631097ac2bf2e824dae818bf6e1
SHA1

6e0435aca03a161c508a8cd57f82288e679252a9
SHA256

0d885e0a343e8ab00d98724224b9a51a323b7916842706413efb307c3f15fa7b
SHA512

1b007e1593c439b81a97c3d25a54a68e50b8a92c4da59d8e7b03f58bcf391ab2899c9a0ec63943a88dc5d116c9ab5bd5f1cd41f76fbfe8780e4c3acb1335ba7a
SSDEEP

192:FytgziBF/6ue7qDZ/49KV+jDsSQiWu/w:FniBUue7MWVDsSQiWu4

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	81c26631097ac2bf2e824dae818bf6e1_JaffaCakes118.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3016	81c26631097ac2bf2e824dae818bf6e1_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\81c26631097ac2bf2e824dae818bf6e1_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\81c26631097ac2bf2e824dae818bf6e1_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3016

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Tempo\DDP.exe

Filesize
186B

MD5
ddd7b9de2762817229b19dcca8e0c7ee

SHA1
709f7e1d87760ac2fd5423af466ddfc04090f1bd

SHA256
ed0c11884bf8d6680a7b9d9f96795df47aeaec1390d1d27acc228f80199aa72a

SHA512
80af0d507dcf9daed8bf0e967618a5fc4b5541076527f8b3af458b480bbeb060ffb6d2fc6c54eac1c2aab7e18192b8a00b8b4e9ae3dfc8cb809bcac1b25d86ec

Download Submit