6bdc4bbf90aba9d022b06b91db2769e4679599b2aeb41deaac50f49901b7db0c

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
30-09-2024 00:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ff9217ddc744ccae287f3067a046bd03_JaffaCakes118.exe
Size

188KB
MD5

ff9217ddc744ccae287f3067a046bd03
SHA1

daf024bdf26eb892f33c597ea9fd42bd2306f201
SHA256

6bdc4bbf90aba9d022b06b91db2769e4679599b2aeb41deaac50f49901b7db0c
SHA512

8b35b9502acc6ab6574fb06da52de2280709c5e45637ad3759ec65869a68d96e85da63eab614fcd10ddc88979347a9754873b0c7e1804444cf4c540001eb1f4d
SSDEEP

3072:P0WeokGgCuI+OjTqvwEu7A0aw1JR9WAJOxfvtJO8lv6pFF:P0boelI+wq4Eu7hUvK8lv6pF

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ff9217ddc744ccae287f3067a046bd03_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\ff9217ddc744ccae287f3067a046bd03_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\ff9217ddc744ccae287f3067a046bd03_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2112

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads