e4ae2f306d7cca94d70838c41f02eebdaa8acc0a40c49b9a3791711c5f09d1f9

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
30/09/2024, 13:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

01925a4f725356c4c6ceb7b348748bb3_JaffaCakes118.exe
Size

24KB
MD5

01925a4f725356c4c6ceb7b348748bb3
SHA1

733036938c940f3f7727376feaf60981d5ae4e9b
SHA256

e4ae2f306d7cca94d70838c41f02eebdaa8acc0a40c49b9a3791711c5f09d1f9
SHA512

ec39294adf0160aeb95bcf33cfc057d7b0d10f397aac7ac784b987a3a60e647f9598213ca3c225ef1a0f6a9ffb75f79b2f3bf65e30ba489e0d4833a187d174b0
SSDEEP

192:d2TUOCx8NsntqtCf/JMGxEdvwNkAX304Kv1MveCq+hIJ8rmC:oY6NKqMyVqw4Kvx1+IW5

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	01925a4f725356c4c6ceb7b348748bb3_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\01925a4f725356c4c6ceb7b348748bb3_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\01925a4f725356c4c6ceb7b348748bb3_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3248

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads