75506d50a495b45b5b1c6248265fe70fc494be975c4d877a4d8c1068b588ff37

Analysis

max time kernel
92s
max time network
93s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
13/09/2024, 12:26

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

de4bff6fa43154a3b9203b694c4b62b6_JaffaCakes118.exe
Size

52KB
MD5

de4bff6fa43154a3b9203b694c4b62b6
SHA1

bcc6aae77a1e7d8c85b32d4660a87f6301ab5b45
SHA256

75506d50a495b45b5b1c6248265fe70fc494be975c4d877a4d8c1068b588ff37
SHA512

a5bc67ec7b431122d8bce8b8c2d6ab1591a5c1626af846ebd1c9312bfc6e456b26ffa2bb880099db0ba7f3e6243c17a404c3a8f61ee5ca0d00acfd097896956b
SSDEEP

384:d7CV9Ds3ELdOy4rN+vQdML4N+ngsx36qAyLLq45e/+Pje/KLe/Le/tfF1mB:YV9D3dOySuKMLGOlaxfvq5no

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	de4bff6fa43154a3b9203b694c4b62b6_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\de4bff6fa43154a3b9203b694c4b62b6_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\de4bff6fa43154a3b9203b694c4b62b6_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4344

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...