2bf1bc4ede91a8b57fe4e69539e662ef2a4fbbdbbccf15555124d5bbdfbb8df6

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
08/09/2024, 10:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

d426a0cad685e9794078e73ff82d2e22_JaffaCakes118.exe
Size

869KB
MD5

d426a0cad685e9794078e73ff82d2e22
SHA1

90baf1b421087cc8d2ee7f61571e90ec84d06aae
SHA256

2bf1bc4ede91a8b57fe4e69539e662ef2a4fbbdbbccf15555124d5bbdfbb8df6
SHA512

534148f49281a860a95304a433106efce36741c4464d056d2e00248494c54f62a0a33c17b4f85f0786e5a9410341b48a393f386462d42ad555e391d1e8a9f562
SSDEEP

24576:sODjvOKGhwCbowNCIGAhuJdOb6wx0xcNjmV:BW2vwNCUEQPxKV

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	d426a0cad685e9794078e73ff82d2e22_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\d426a0cad685e9794078e73ff82d2e22_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\d426a0cad685e9794078e73ff82d2e22_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2720

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads