cecd0ff74e6bde2773bbea2a2f00de02799d45c050a4eecba9e53afa7c1cb625

Analysis

max time kernel
141s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
13-08-2024 10:06

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

929d26941c8ef2a5cdd46df11d9c178f_JaffaCakes118.exe
Size

736KB
MD5

929d26941c8ef2a5cdd46df11d9c178f
SHA1

58e24462fcb894599010d32187b72416cd939590
SHA256

cecd0ff74e6bde2773bbea2a2f00de02799d45c050a4eecba9e53afa7c1cb625
SHA512

21f2cf0b8560dbde07de6460f85725f589e5d560650bb892f38cca589534618c7567b9935a07f0f4212720f0bc729e5b2e87ed7895c53293f743b1f5a5bd2327
SSDEEP

12288:U/kEdFeCXuLKcCVsz648KzfwXVhs3e8ETkB3j:UXPeCXuLKdsO48KDSVhT8gkJ

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	929d26941c8ef2a5cdd46df11d9c178f_JaffaCakes118.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2736	929d26941c8ef2a5cdd46df11d9c178f_JaffaCakes118.exe
2736	929d26941c8ef2a5cdd46df11d9c178f_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\929d26941c8ef2a5cdd46df11d9c178f_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\929d26941c8ef2a5cdd46df11d9c178f_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2736

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads