7bc92b6eb2e18ac4d596972a7845f93b9d84d17ab10051b2f36702c04ac4a741

Analysis

max time kernel
119s
max time network
124s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
22/08/2024, 16:52

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b8651f21eb8fbcc84f77eaf93656b536_JaffaCakes118.exe
Size

24KB
MD5

b8651f21eb8fbcc84f77eaf93656b536
SHA1

7490d59a1d889307f45c5a79a943010a74d65073
SHA256

7bc92b6eb2e18ac4d596972a7845f93b9d84d17ab10051b2f36702c04ac4a741
SHA512

2014da4f26ecc9269f2b13d28c781ee4b1433e4792070bbab5a0681ef4b43aedb195a9c2b84d3ff251a79485fbac30ed25ddcf513a59a25969ffd59fae70a470
SSDEEP

192:1jRAUCXvgruxWRuOgfHO/1J6KKYDsSQiWlvRA:1FLCE9uOEirDsSQiWlJ

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	b8651f21eb8fbcc84f77eaf93656b536_JaffaCakes118.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2372	b8651f21eb8fbcc84f77eaf93656b536_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\b8651f21eb8fbcc84f77eaf93656b536_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\b8651f21eb8fbcc84f77eaf93656b536_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2372

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Antivirus\avast.exe

Filesize
186B

MD5
ddd7b9de2762817229b19dcca8e0c7ee

SHA1
709f7e1d87760ac2fd5423af466ddfc04090f1bd

SHA256
ed0c11884bf8d6680a7b9d9f96795df47aeaec1390d1d27acc228f80199aa72a

SHA512
80af0d507dcf9daed8bf0e967618a5fc4b5541076527f8b3af458b480bbeb060ffb6d2fc6c54eac1c2aab7e18192b8a00b8b4e9ae3dfc8cb809bcac1b25d86ec

Download Submit