eeb9cc590521e6476bcdb7b4efa5db7a83b8e2ed5dda1c4e9d08ef7b35b6a25c

Analysis

max time kernel
117s
max time network
117s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
25/09/2024, 11:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

f5de37c698a9001d4b3400f6aa20e0e6_JaffaCakes118.exe
Size

60KB
MD5

f5de37c698a9001d4b3400f6aa20e0e6
SHA1

376c0f3a0d59db97869ac9e7e2969abfde85f4eb
SHA256

eeb9cc590521e6476bcdb7b4efa5db7a83b8e2ed5dda1c4e9d08ef7b35b6a25c
SHA512

3d6e9c7bcf9a165413d073daa607e07ad6d3046d42b5c267308576876b32e6b0ca6ddbcc4e656a9b032a8c308fb5b63b0771cd075a3beefef687784c1d927c3b
SSDEEP

768:1fryQR9MmQzJy14/wTaxepIVa4FDgLVHL7sPRrfCrG6J/u9J8BN8+5yadDQ:1fmQRCEYe94GLV/KfCKlH8BK+jtQ

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	f5de37c698a9001d4b3400f6aa20e0e6_JaffaCakes118.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2228	f5de37c698a9001d4b3400f6aa20e0e6_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\f5de37c698a9001d4b3400f6aa20e0e6_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\f5de37c698a9001d4b3400f6aa20e0e6_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2228

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads