16191754277da2a9332d45ed4d1d216c8731e02563ad214c14445a9f87d0f240

Analysis

max time kernel
14s
max time network
20s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
28-08-2024 19:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

c7766bd20399136635015c68e8b30721_JaffaCakes118.exe
Size

302KB
MD5

c7766bd20399136635015c68e8b30721
SHA1

726c3dda124fb21a560ac3c85c5a16f13a63cbdf
SHA256

16191754277da2a9332d45ed4d1d216c8731e02563ad214c14445a9f87d0f240
SHA512

3203eb49565cc15a169b5ed6679e03ae20117e526f5258268f2498dadd7b8f956cdfcc5133a104f7702ca192cb0cf4da54343ad3c50d58b80231d0193490a3e3
SSDEEP

3072:NA1ehl/69NcGiQAP6MmsCXHlcHjEcCDQLwBVYv87z:NDl/UcnPkFUjGDbyO

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	c7766bd20399136635015c68e8b30721_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\c7766bd20399136635015c68e8b30721_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\c7766bd20399136635015c68e8b30721_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2432

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\plfF048.tmp

Filesize
5KB

MD5
cfaec980a3639a6b33704c0db20cb812

SHA1
e9402b1deb9293d51ea7a45ff5aea0f5bff1ea8f

SHA256
55023b00e2c2401272d0ad7b4b633814869483b6d939c5d4910e4ff18eeeee6c

SHA512
72bb65180098c195ea74c7dacf24500d98bbd872149e4247bdc98b3a12fabd2fd6846a61b7d30e610748d49348c347a1cec5939276e3a0b30703aeeb591017b2

Download Submit