357bf2bb152c29830f1f24a83a668e94e7620caa09af96b3a68651331240c645

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
11/08/2024, 21:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8c0423b572362d661c336e986fb2c554_JaffaCakes118.exe
Size

65KB
MD5

8c0423b572362d661c336e986fb2c554
SHA1

940cbc055ec1a951e5524660adc9b59a5ed15a34
SHA256

357bf2bb152c29830f1f24a83a668e94e7620caa09af96b3a68651331240c645
SHA512

9ed56d0e5c3df291713da8fec5974fcbd34e460206a030f333ab8eabb5ca251ab41db206744fc1f8b4269a32f8a583169dc573a04b31e69a066de3f3c045e499
SSDEEP

768:ZYDTsJDIXF8xaY+8c9nrQlnKr5RPaLrcgiOgMJwQOp6rLEZD:iDTsqF8xjcQeP2cnOgoG8rwh

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	8c0423b572362d661c336e986fb2c554_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\8c0423b572362d661c336e986fb2c554_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\8c0423b572362d661c336e986fb2c554_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2900

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2900-0-0x0000000000400000-0x0000000000412000-memory.dmp

Filesize
72KB

Download
memory/2900-1-0x0000000000400000-0x0000000000412000-memory.dmp

Filesize
72KB

Download
memory/2900-2-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download