4d7bec84ef381824b21027eeecec543b234f8d1e33eb3f4a1516b2067d17a676

Analysis

max time kernel
16s
max time network
17s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
08/09/2024, 22:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

d531c4927cd14a2ad5b50807547d9e78_JaffaCakes118.exe
Size

1024B
MD5

d531c4927cd14a2ad5b50807547d9e78
SHA1

e2485ee4e68ec13347d19b35e5adeae1964af948
SHA256

4d7bec84ef381824b21027eeecec543b234f8d1e33eb3f4a1516b2067d17a676
SHA512

4a106920e633e7c2f0e03c7275974ca753db3949a2dd1179737fbb126b82abe20ad00f96d401e1b84fc76a05ba237a2c3602858ac06e520a1c3b44a61ab7c5ee

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	d531c4927cd14a2ad5b50807547d9e78_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\d531c4927cd14a2ad5b50807547d9e78_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\d531c4927cd14a2ad5b50807547d9e78_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1040

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads