d40058e767586138c09f15cc37f8855cf5fde3b21617bcf27805fd84b956390f

Analysis

max time kernel
140s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
28-08-2024 18:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

c76550e36761ddded7745395388e2aa6_JaffaCakes118.exe
Size

59KB
MD5

c76550e36761ddded7745395388e2aa6
SHA1

877d168e2fa289bc120583bf5051486a15db0ac2
SHA256

d40058e767586138c09f15cc37f8855cf5fde3b21617bcf27805fd84b956390f
SHA512

211484a916ed3ac0ddeb62be11abbfa3648d583cf261b672bd148ad8ee28028cf82ee8e3be96a256515b9a2145818ff3bb2b5f3e8d83a84fb15469d9312af3ce
SSDEEP

768:4C8cCGFusZFPqZyPsgUKU9CiCO2QRL5dgzc6v6azQpsXmyhdVfDKpxS:ZVusZtMvlRL5dKvtFjpfm/S

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	c76550e36761ddded7745395388e2aa6_JaffaCakes118.exe

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-2412658365-3084825385-3340777666-1000\SOFTWARE\Microsoft\Internet Explorer\Main\AutoSearch = "0"	c76550e36761ddded7745395388e2aa6_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\c76550e36761ddded7745395388e2aa6_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\c76550e36761ddded7745395388e2aa6_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
PID:1380

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads