1a018a9e4ae7563997c01bfd6c6947936e40c7d95838c72c1228d2ed8907bf8a

Analysis

max time kernel
15s
max time network
20s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
19/09/2024, 11:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

eb40f40ffe64c7cf7959e30039db90c5_JaffaCakes118.exe
Size

101KB
MD5

eb40f40ffe64c7cf7959e30039db90c5
SHA1

c3f352d1406e0dc56a9e5ac414270d4c4c677925
SHA256

1a018a9e4ae7563997c01bfd6c6947936e40c7d95838c72c1228d2ed8907bf8a
SHA512

720792864ca871dbfae1ed8aa3c0348afa39365e8a9bf0ed0ef5d59d73ae847c797f16f424fab1046359d10fae18a8676d633e2483d1c42811f7515bf95052c2
SSDEEP

1536:mVTENfmT9Xtx7zUB2oXdvxQpnf5annn1GMk+Db8X78CFXypKA0cTVGRaT:gXdx7zUB2oNv4MkGg7rXCFv

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	eb40f40ffe64c7cf7959e30039db90c5_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\eb40f40ffe64c7cf7959e30039db90c5_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\eb40f40ffe64c7cf7959e30039db90c5_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2180

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads