a83393a49a296b254ce4a7249046375dcd912608c3a2341fd502ba9375c04e1e

Analysis

max time kernel
31s
max time network
42s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
10/08/2024, 17:25

Sharing

Copy URL

Twitter E-mail

Reason

Machine shutdown

Report Analysis Logs

General

Target

86f8e526c2f7e6ea280d6210fa083d1e_JaffaCakes118.exe
Size

233KB
MD5

86f8e526c2f7e6ea280d6210fa083d1e
SHA1

b376bdb7056bb6c75518ab724a66cee630709d42
SHA256

a83393a49a296b254ce4a7249046375dcd912608c3a2341fd502ba9375c04e1e
SHA512

7492791bc8fbb485246c283056d355952cda8f6cfa51ab71fbbe78b2b4ee8ea00d6bc08f145ff87f7d16d82b80e1f907288305e95f6cec97d9ee50c4892e91f2
SSDEEP

6144:CQq3QyPk4h01HHIOtQf/vxw/qJvm5uf8VFquaI:POqHHpQZ9mI0L2I

Score

3^/10

discovery

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	86f8e526c2f7e6ea280d6210fa083d1e_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\86f8e526c2f7e6ea280d6210fa083d1e_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\86f8e526c2f7e6ea280d6210fa083d1e_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1480

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads