4040df3fecfd55bb37d083d0c53f9511672f463daef431a489dc97a8d8e128c7

Analysis

max time kernel
134s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
19-08-2024 14:22

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ab5f2d7b1d78b4cbdb90c1b77ae4367e_JaffaCakes118.exe
Size

1.9MB
MD5

ab5f2d7b1d78b4cbdb90c1b77ae4367e
SHA1

873fbd5c3126aaca97b44fb32005196741c58f3f
SHA256

4040df3fecfd55bb37d083d0c53f9511672f463daef431a489dc97a8d8e128c7
SHA512

0f1a701a4d7663270e54acaef7d513e88f8a987a3c26ed9ce3c2f2145c4cf92db1153623391b9dd85c7ea2d4f336f59886514a203e196fa2ffd1d24461ff6f6a
SSDEEP

49152:Hw7AilovY+Zl2CNjlownx12hn93vymcC:Q7A0ow2tlnnxQ9fy

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ab5f2d7b1d78b4cbdb90c1b77ae4367e_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\ab5f2d7b1d78b4cbdb90c1b77ae4367e_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\ab5f2d7b1d78b4cbdb90c1b77ae4367e_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4996

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads