1e64e0b6a7159ffa7f979fb8156718a46137e5d1678b0e24ad7abde096b10a39

Analysis

max time kernel
133s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
21/08/2024, 18:35

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b49235403b2db3e04ff728e44eb37688_JaffaCakes118.exe
Size

280KB
MD5

b49235403b2db3e04ff728e44eb37688
SHA1

a0ad021a0e26b902489f2d12967711daa157ad26
SHA256

1e64e0b6a7159ffa7f979fb8156718a46137e5d1678b0e24ad7abde096b10a39
SHA512

53d2a32d824594eb7c7b013bacfcc2571f9f55755aeea8bc8ffe901490469fa33a3ed21e8e779c119989beb4848da0ba4814d874ac3639b15a8b5bb7c9741a1a
SSDEEP

6144:5okVMSd6mkdIG3RFnLXIpk1MpeThHkCpBefr:5okSmZkdIsPLXCk1MAhHZpBSr

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	b49235403b2db3e04ff728e44eb37688_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\b49235403b2db3e04ff728e44eb37688_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\b49235403b2db3e04ff728e44eb37688_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1972

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads