b1a3c29e2fb81855d6bc540243ccbf215d7baa75b3675d306dd4937825e83267

Analysis

max time kernel
94s
max time network
95s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
19-09-2024 13:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

eb784f224b2a3a748c402cd9888c5975_JaffaCakes118.exe
Size

852KB
MD5

eb784f224b2a3a748c402cd9888c5975
SHA1

a3bbc3b7d0d667832cf85d3124464d811737e9b1
SHA256

b1a3c29e2fb81855d6bc540243ccbf215d7baa75b3675d306dd4937825e83267
SHA512

48fadfcaf6ac62b4ad4913d6b5c41f87037f695bffd6b07feac832ababb2915c26824875708d1ca869103677dea1a030529699598a68629fa025a1d948977557
SSDEEP

12288:wVCvN53f0cwbd4smgNf4ItP2q/J+fjqrxKyOsnDgVTFqCncSgC:lf0/d/xxU+7KywVT7cs

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	eb784f224b2a3a748c402cd9888c5975_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\eb784f224b2a3a748c402cd9888c5975_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\eb784f224b2a3a748c402cd9888c5975_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1388

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads