d19a7c759d0f4107ab3b0b7837c7c892e15e802768298d20a8a6a8db28652a3d

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
19-09-2024 06:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

eabb676da6bab7a0bf48ee5cd9014a20_JaffaCakes118.exe
Size

101KB
MD5

eabb676da6bab7a0bf48ee5cd9014a20
SHA1

d9ea9cacf47be7e9873e7dc6673ac88defdebd40
SHA256

d19a7c759d0f4107ab3b0b7837c7c892e15e802768298d20a8a6a8db28652a3d
SHA512

71212b2571116bac31048920384589161dc475b77d05a38feae538a9a2e72520f067d220d7cea4b8804e6690d63dd1a286f06d1514801e3e938f9a1103e93dc6
SSDEEP

3072:sa7kXfxca8GZGkQJlMd1ptwRdHYnaAr46C:sa78PvZnMkznaA4n

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	eabb676da6bab7a0bf48ee5cd9014a20_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\eabb676da6bab7a0bf48ee5cd9014a20_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\eabb676da6bab7a0bf48ee5cd9014a20_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3028

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads