25d5282a4d7a79fc3bad945ca4369afa93779f0b9fa396a8d9219de95ccb1251

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
08/09/2024, 09:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

d402754f2b1b5d9f56ab88e6d0a636c3_JaffaCakes118.exe
Size

220KB
MD5

d402754f2b1b5d9f56ab88e6d0a636c3
SHA1

ecbd5073a7d5a87f0d84801ea54e444fff67d285
SHA256

25d5282a4d7a79fc3bad945ca4369afa93779f0b9fa396a8d9219de95ccb1251
SHA512

c8be87b588a4e5c833b2bdd984ea409e258567bc9160b6b2d089f020eabe2223551d0223be570ed619b2cf20acc5e6706e9d8bd41cdf03be89972e8f1c8ba40c
SSDEEP

6144:wHaVMa79HVphCciXw/0C5pcy5K7OqCbHX:wYMa7pVmcik0cp75UOqCLX

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	d402754f2b1b5d9f56ab88e6d0a636c3_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\d402754f2b1b5d9f56ab88e6d0a636c3_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\d402754f2b1b5d9f56ab88e6d0a636c3_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2408

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads