ded46787c40017de0d3bb264b4abd7deb5c3723630d6b4713a4dc7074e505b4f

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
23-08-2024 13:32

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

bbf01792d245277580c13cb2239e0c37_JaffaCakes118.exe
Size

28KB
MD5

bbf01792d245277580c13cb2239e0c37
SHA1

b28273fa256fd563069321645767e92b27c4b8b5
SHA256

ded46787c40017de0d3bb264b4abd7deb5c3723630d6b4713a4dc7074e505b4f
SHA512

60edd10142117a971e033c7b472e67dcbfd9d70d96404a41379cd01e2793a96dfe8fd82010cc699c7fb5aa0bcc5ca85f27d6e82cd15d2bcfcb4a17e786253de3
SSDEEP

384:Jnfwopu9hS7U+XAvY2YcgzIGGEMLuYg7IhVs1llrCZN6aCEi3:Jnfvs9kn4GcgzVNMLudshsmZN6l

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	bbf01792d245277580c13cb2239e0c37_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\bbf01792d245277580c13cb2239e0c37_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\bbf01792d245277580c13cb2239e0c37_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2488

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads