d962ced65eac65126e1e77a30fa893f01eed34d2b7e8baaec4d52960ceeb424a

Analysis

max time kernel
140s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
12/08/2024, 04:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
8d46eb9d19ac697b2573c5d804c3f484_JaffaCakes118.exe
Size 32KB
Sample240812-etzrhavdqp
SHA256 d962ced65eac65126e1e77a30fa893f01eed34d2b7e8baaec4d52960ceeb424a
MD5 8d46eb9d19ac697b2573c5d804c3f484
SHA1 01f17507102f2f13b7d344c01630431df68aec6b
SHA512 c3b990c185eb7a5865ac38c861d79437dfc1ac95b4778a26bf5772c42b6f736af59d5edf21bb54c1ae5fa2d6da6d0cc213cda7d88ee42dc7176b97cca432e057
SSDEEP 384:lEhL6GOCjyslWeOWw9iVR9TB51q5AGBKMZM2DZSSEg:lExAC1jO6T9TB5QXBKM/Yt
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	8d46eb9d19ac697b2573c5d804c3f484_JaffaCakes118.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
856	8d46eb9d19ac697b2573c5d804c3f484_JaffaCakes118.exe
856	8d46eb9d19ac697b2573c5d804c3f484_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\8d46eb9d19ac697b2573c5d804c3f484_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\8d46eb9d19ac697b2573c5d804c3f484_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:856

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads