cb603da8a9cb1c8bbf922175d30e8f51db867fa5da3a4ddc3637805b7a6ccae2

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
25-09-2024 04:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f5393a2616fdacd43d46b302cc723e84_JaffaCakes118.exe
Size

15KB
MD5

f5393a2616fdacd43d46b302cc723e84
SHA1

cde268a8761226c886f9b04f1f9cce84ec136d36
SHA256

cb603da8a9cb1c8bbf922175d30e8f51db867fa5da3a4ddc3637805b7a6ccae2
SHA512

89ad00f64d9fcd0601c5bcbdbe5fcc2ed029f5b34dce3066326ce05c39dd2526c61c15e43575b248345f5be44990eca29f519b6956b2ed452b60576c55bb1077
SSDEEP

192:v4gVFB27OZINpR4Ybv3PCPxOgn6HhEQU507iGGOwEaPA5p:vX87OZOzu8gIP20JH5p

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	f5393a2616fdacd43d46b302cc723e84_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\f5393a2616fdacd43d46b302cc723e84_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\f5393a2616fdacd43d46b302cc723e84_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2204

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2204-0-0x0000000000400000-0x0000000000406000-memory.dmp

Filesize
24KB

Download