7946c061d08c8be69a57e9b121a24863c619afdd5dd7f06878e4f179ef482ef8

Analysis

max time kernel
92s
max time network
99s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
12/09/2024, 18:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

dccd6529b5a19875a3eddc41be923143_JaffaCakes118.exe
Size

514KB
MD5

dccd6529b5a19875a3eddc41be923143
SHA1

2f47da126f0a199b319008cdc252d21f0f7c94a8
SHA256

7946c061d08c8be69a57e9b121a24863c619afdd5dd7f06878e4f179ef482ef8
SHA512

833af24ece8afb8f6f5ffd76ace9bb2cd48a9a11c5635c97e33f156b867efb6d2e828a18563a99fa7d722016c349e3837dfbc1ef7b132f733694e2902849ff72
SSDEEP

6144:VrZ9T6mR0oOOTCoHoaoyYJUtuPJPGBKEaQuF0VbG0DZuvantTKsYmF79cQx8c/6G:5Z9T6mRR0LPEaX4nxGox+yx5b

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	dccd6529b5a19875a3eddc41be923143_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\dccd6529b5a19875a3eddc41be923143_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\dccd6529b5a19875a3eddc41be923143_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1912

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads