aa196b7acff865e1f29f4e0923c70c64d95ac3f718ac3e264af72d82fa6136ad

Analysis

max time kernel
118s
max time network
120s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
23/08/2024, 21:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

bd4740e8c46f0fce636f83fe049c4cb6_JaffaCakes118.exe
Size

84KB
MD5

bd4740e8c46f0fce636f83fe049c4cb6
SHA1

747cd8fa029b01f7a0b4b0825b87f68d958d03d3
SHA256

aa196b7acff865e1f29f4e0923c70c64d95ac3f718ac3e264af72d82fa6136ad
SHA512

7d7ad9b1a0d888a703c154fab65a1f603592096c13f9f390bf7649be91e24d9d0566d20fc38a4879602f27ef9178e7a9bf1e41f1e1626b8920774c80db7c9cef
SSDEEP

1536:wl+F/8NnzC5AH6JPQvE80xtj7+VVAl/jA4b++qlIYBeuRZ5h7U6wKSm:w1n2SoPQvE8QJiVVAl/555uRZ5h7UkSm

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	bd4740e8c46f0fce636f83fe049c4cb6_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\bd4740e8c46f0fce636f83fe049c4cb6_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\bd4740e8c46f0fce636f83fe049c4cb6_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2084

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2084-0-0x0000000000400000-0x0000000000418000-memory.dmp

Filesize
96KB

Download