a6e099cd2e53c3e644dcbd0b08e357389ffa542b0a182ccf678665ec9efea308

Analysis

max time kernel
96s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
24/08/2024, 04:31

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

bde5bc95a1015093e53c03f7686e6e69_JaffaCakes118.exe
Size

52KB
MD5

bde5bc95a1015093e53c03f7686e6e69
SHA1

70957d3c581c169af32cfa69cfef279a0999ae0b
SHA256

a6e099cd2e53c3e644dcbd0b08e357389ffa542b0a182ccf678665ec9efea308
SHA512

28d8ec570a9aced1275ba4e8d2da643eaf779c7ee8a2b60c0c918cd7c4b9fe64e9996fd5b04849fd29bb51de53c8fb4d8a520c8b109a2e1e137ff18c4627fc4c
SSDEEP

768:71qm1x825LSZkYklsKbuS2NrN8a6Gg2dT5SEpVWOfMC5rQuK9fHkkTojv:0mxFSQlVmtxpg2dTHOc3xloPxo

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1796	4004	WerFault.exe	85

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	bde5bc95a1015093e53c03f7686e6e69_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\bde5bc95a1015093e53c03f7686e6e69_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\bde5bc95a1015093e53c03f7686e6e69_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4004
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4004 -s 304
  2⤵
  - Program crash
  PID:1796

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4004 -ip 4004
1⤵
PID:2096

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads