1a5e0da13775b8c03c702b9a9caf5dba6d419403dabb64725cef29267b92da92

Analysis

max time kernel
16s
max time network
17s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
10/08/2024, 20:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

877a48bd7c5e413dc2ff12697fa7b23a_JaffaCakes118.exe
Size

1.8MB
MD5

877a48bd7c5e413dc2ff12697fa7b23a
SHA1

bedb975b5940e66f998ed3c29c720e7836e57c89
SHA256

1a5e0da13775b8c03c702b9a9caf5dba6d419403dabb64725cef29267b92da92
SHA512

b43a7e2331dfb19365d860e1689afde4eeb265ee3cc722b651de6c4ff292bacb833b5816484df28db52283a0ab69c5a34d73d2b81f04631601325f85f829f2f4
SSDEEP

49152:Ci/+a+UbBGXFzuwQ/TKK8pwJiFGpHcAItoYNTKr5TH6m:9/+OBGXMwQLqwJ0OHcAIto8KVn

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	877a48bd7c5e413dc2ff12697fa7b23a_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\877a48bd7c5e413dc2ff12697fa7b23a_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\877a48bd7c5e413dc2ff12697fa7b23a_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2416

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads