8f5b66e12083be58b6e1aeb59f6b8e2e6fecd4e8d09c216ae0d8b83bc4855007

Analysis

max time kernel
92s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
13/09/2024, 16:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

de86730f7684d55ba0d276cdb866923b_JaffaCakes118.exe
Size

7KB
MD5

de86730f7684d55ba0d276cdb866923b
SHA1

52f5cf9c3dad6a923ead005e644921b2757c6cb0
SHA256

8f5b66e12083be58b6e1aeb59f6b8e2e6fecd4e8d09c216ae0d8b83bc4855007
SHA512

51312c84a4174707b57840a2b75fc9dc20a29a321cf7d090ec9ca256942c69c4f75e8e70cb346dcc1feaa5623d3699c7cb03055155da9b6b21ceaa4a75d98e39
SSDEEP

96:dUlvyyLbJiFJ8mdDKpMcmcuEne0ZIDVT0jTnxpZ1KXIoygtAAEoTQW:d2vpLrkmMcAEe+IRknxf1K9DQ

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	de86730f7684d55ba0d276cdb866923b_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\de86730f7684d55ba0d276cdb866923b_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\de86730f7684d55ba0d276cdb866923b_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4236

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4236-0-0x0000000000401000-0x0000000000403000-memory.dmp

Filesize
8KB

Download
memory/4236-1-0x0000000000400000-0x0000000000404000-memory.dmp

Filesize
16KB

Download
memory/4236-2-0x0000000000400000-0x0000000000404000-memory.dmp

Filesize
16KB

Download