7fdda5abb62b898c77ae0d0c8ec08d025c69fbeb780c03f71719d6971eed3a8f

Analysis

max time kernel
92s
max time network
106s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
08/09/2024, 09:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d40df2142dd064d46a884d8e1d770078_JaffaCakes118.exe
Size

149KB
MD5

d40df2142dd064d46a884d8e1d770078
SHA1

6639d6b3d387d7b4e87c4b3a184ba365ebcef21e
SHA256

7fdda5abb62b898c77ae0d0c8ec08d025c69fbeb780c03f71719d6971eed3a8f
SHA512

45977ba59e60aaedeaecd4ae514782588f19c1286ce0e32188d1414e7485292a7c99e3cb39b08900b39b43f12c8ada8df3f4dcf8341f0d809ee6215949c3237f
SSDEEP

3072:KC7Hwbw1LTPYCsB+NPu1lp+fxJgaZvr2IF6+LOPfuE5KBY2a8Xfxmiuizz1Tv+m:KC7Hwbw1LYUNPu1z12vh6+LOHr5KBYP+

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	d40df2142dd064d46a884d8e1d770078_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\d40df2142dd064d46a884d8e1d770078_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\d40df2142dd064d46a884d8e1d770078_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1696

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1696-0-0x0000000000400000-0x000000000045B000-memory.dmp

Filesize
364KB

Download
memory/1696-1-0x0000000000400000-0x000000000045B000-memory.dmp

Filesize
364KB

Download