0de5a55f4bc1befd4c3356c32547f6469cf56ebd2a28a6e13dbaeffc5b645960

Analysis

max time kernel
96s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
25-09-2024 19:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f6ab369d51c6dfbeedb39b1f6c9251a9_JaffaCakes118.exe
Size

93KB
MD5

f6ab369d51c6dfbeedb39b1f6c9251a9
SHA1

953ac6cb9ee7aa29b098eabca33e1c3b44855007
SHA256

0de5a55f4bc1befd4c3356c32547f6469cf56ebd2a28a6e13dbaeffc5b645960
SHA512

c811c173a0d3d032fa1d78eeec90fe3edec1822e4ed3fd48ccabb9b0a46e30f423c79762eb897303ecda47f55317e770076c6c2fde6f6a9ac0993b1dc2e7411a
SSDEEP

1536:peAZLLL1GXAQ5k8OvWNfk3QjWq6NmOaDraK/p4tPKAhfgq:0QB8OW6NmOa/aK/KlKyn

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	f6ab369d51c6dfbeedb39b1f6c9251a9_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\f6ab369d51c6dfbeedb39b1f6c9251a9_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\f6ab369d51c6dfbeedb39b1f6c9251a9_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1440

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads