68c0f3defc2080a4016b5cbf01bb7530a963550cb21027bac17f1c7d76073a25

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
19-08-2024 22:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

acc054f5caf4770594f68be9aff1f192_JaffaCakes118.exe
Size

846KB
MD5

acc054f5caf4770594f68be9aff1f192
SHA1

3e7aec6bd99e085b5331f345df769d1c788e1d23
SHA256

68c0f3defc2080a4016b5cbf01bb7530a963550cb21027bac17f1c7d76073a25
SHA512

30e4c3ed80be6f6e13481c1d138044aa7666d2ee55036c416e59ecee256e3d0b3e3ff2b74c836460bcd4c3ba60733442e7b4bccdff92a2a42b23f846dfbeed70
SSDEEP

12288:ohRaF0EPO1CrAr3xQTXU15BR9I6EdiVgYARi:oh8F0EPO1eAr33BvIRBI

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	acc054f5caf4770594f68be9aff1f192_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\acc054f5caf4770594f68be9aff1f192_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\acc054f5caf4770594f68be9aff1f192_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2380

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads