8d3e646bd4880f1be9f6f7814e0ae4014a0fcdb1da904cdcd3227ab57c1b939b

Analysis

max time kernel
95s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
13/09/2024, 09:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

de216b7029387dae795f9f19a1467d99_JaffaCakes118.exe
Size

1.2MB
MD5

de216b7029387dae795f9f19a1467d99
SHA1

84efb66b3b1ba5642214c1b39b82a8835458850b
SHA256

8d3e646bd4880f1be9f6f7814e0ae4014a0fcdb1da904cdcd3227ab57c1b939b
SHA512

7087f9a987ecc230de87556d93b58a49ee7ab01bf6f15c746f722a00a30a72412720716e5bc22462befd883eeb5040fa6916c2a35f79e7438d235349f21eb57a
SSDEEP

24576:dJcp8OjMh1MyVZzEIHz052AVUapmkFDAMWHwVWDJY2oGTeVS0PD0:KdbpFDHP0xTeVI

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	de216b7029387dae795f9f19a1467d99_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\de216b7029387dae795f9f19a1467d99_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\de216b7029387dae795f9f19a1467d99_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5764

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\SogouPY.users\acc.dat.wtm

Filesize
80B

MD5
ec200ac12b7f56987dd6c487c1a157f9

SHA1
d22d388851092c47410c08a59f92477c2e86719d

SHA256
3466cf4512f46ea498ff493882398a373c85085d03213b289acfbd0cd6a110d2

SHA512
284d78bdef6e4e448e483fdcbfe99c0cc7d57c0e2cb7d2ce57bd293326cb678a68b8cb3a337fc37fa75c3e88b52506bd88811c40dce44c50d1156c761eeb96f1

Download Submit