328d1a64d8d44cef5c80a5587dfab5445c201f38539581550c739287ca7ed1a4

Analysis

max time kernel
21s
max time network
37s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
21-09-2024 19:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f0773f7388fa74d54e2dbb10e5fe8891_JaffaCakes118.exe
Size

24KB
MD5

f0773f7388fa74d54e2dbb10e5fe8891
SHA1

29c326fd2ba744c681539911e395fc2e1b1d07be
SHA256

328d1a64d8d44cef5c80a5587dfab5445c201f38539581550c739287ca7ed1a4
SHA512

f6c2f89206a420e87028428a49ce793991b5ed9b011e5f8cbcd132097115c99ef135761a4379ac2a5a266dfa6f8101d567dd7c686a2af02a21f34b3671e47952
SSDEEP

192:UYtt+ELGsDi8DHbpI3RZLt9FgEmaNjZoW3DwraB/9K:UYttDD74mVaNj2W3Dwre/9K

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	f0773f7388fa74d54e2dbb10e5fe8891_JaffaCakes118.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
792	f0773f7388fa74d54e2dbb10e5fe8891_JaffaCakes118.exe
792	f0773f7388fa74d54e2dbb10e5fe8891_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\f0773f7388fa74d54e2dbb10e5fe8891_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\f0773f7388fa74d54e2dbb10e5fe8891_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:792

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads