ecce0204d940d807c0effdf84e5ec77385b9d12914356184108e6bf3f9aa4bf3

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
17-08-2024 20:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a40cc07575785a0ccb2ef99aa8e694a8_JaffaCakes118.exe
Size

2.3MB
MD5

a40cc07575785a0ccb2ef99aa8e694a8
SHA1

dd2d8abe2f63f710031e1fdc032f91fc2a5b6151
SHA256

ecce0204d940d807c0effdf84e5ec77385b9d12914356184108e6bf3f9aa4bf3
SHA512

38d19e68750eea97d3ee633df6b5c62c0840f9336a54170da79204eb28135debf55d0e7335fa0d0559c908ac66168146567f64d995e95f18fe6c3fd1801d5a8c
SSDEEP

49152:c6JZRtAoGYeM6rJtSaZXZHUCIxgWHs5LRUiqF0llfLXIct/xkzlj:RJBRCFtSaZhoqUR0TzXkzlj

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	a40cc07575785a0ccb2ef99aa8e694a8_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\a40cc07575785a0ccb2ef99aa8e694a8_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\a40cc07575785a0ccb2ef99aa8e694a8_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3052

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads