1f9c49ca2d4afae10f15e6a6d90887b28feb1af718e319e637d5679d9810bb14

Analysis

max time kernel
139s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
11/08/2024, 08:35

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

89b2b5ad3cc0554226a1f99ac3d0b6bd_JaffaCakes118.exe
Size

444KB
MD5

89b2b5ad3cc0554226a1f99ac3d0b6bd
SHA1

c44a2e1f46788fb53e11a769b48dd0589d40ac73
SHA256

1f9c49ca2d4afae10f15e6a6d90887b28feb1af718e319e637d5679d9810bb14
SHA512

dda33de1abd4e543c409c2cefc3d3a2e8b0d0815c9f33b1c976afa1b26c3146c77c339dd43db2531eb9b70b6f09a0a54d62dc0e071dd55fc02b1f36e2799b83f
SSDEEP

12288:3wdg6oNFpB6wsphViWZgoX1UrH+dReGx9JaCx:aeNLB6p4VAyy9Jvx

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	89b2b5ad3cc0554226a1f99ac3d0b6bd_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\89b2b5ad3cc0554226a1f99ac3d0b6bd_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\89b2b5ad3cc0554226a1f99ac3d0b6bd_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3348

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads