eded92d94b18e0295b75c5793f4b5749c8a551536b86684565e4735429174cff

Analysis

max time kernel
94s
max time network
96s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
27/09/2024, 12:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

fa63e80107aaaa4def452372a75d61d1_JaffaCakes118.exe
Size

80KB
MD5

fa63e80107aaaa4def452372a75d61d1
SHA1

afec86666e38115138249d44ac3915ab57eee79e
SHA256

eded92d94b18e0295b75c5793f4b5749c8a551536b86684565e4735429174cff
SHA512

ae70099f6af0d83ea2cb8b6511eeca02356b952f8563c29ddd3cf37b118be00e317814eb91f098ffec2d1b7bcd607d4aaaf49b8d58a17c2ea60869d216cbcc3f
SSDEEP

1536:4mZAX1o7JjEnvQdeDOFaNEnmHhqtyuoQVI:4eAFoNEYEDxNUtyuoQVI

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	fa63e80107aaaa4def452372a75d61d1_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\fa63e80107aaaa4def452372a75d61d1_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\fa63e80107aaaa4def452372a75d61d1_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4048

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads