a6234124457a5470453ddf2864bbd0704e17c3fa7acaeebf4f9ac16b62c9d77a

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
01/10/2024, 14:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

062dc6590a1e3e3df34c8cbb35929ffc_JaffaCakes118.exe
Size

14KB
MD5

062dc6590a1e3e3df34c8cbb35929ffc
SHA1

0134082e5bad389708dde8b5916e1fe7a7bfd03c
SHA256

a6234124457a5470453ddf2864bbd0704e17c3fa7acaeebf4f9ac16b62c9d77a
SHA512

36bd9899b2ebb02f1124c6f5287ba3657d955026fbb5b0dc67d94973d12ee03931e668d3cf47da44f32bed71cfbdde67310720f644987fe8b492e1ca4f8ba979
SSDEEP

192:YW27TqU+pB4HDV3P/Znc/EL5uzkdUbQDjFc11P2w8V7fCLHP88BJE2hK3R:WgaVf/ZcNzoZkPP8V7fCz8mm2G

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	062dc6590a1e3e3df34c8cbb35929ffc_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\062dc6590a1e3e3df34c8cbb35929ffc_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\062dc6590a1e3e3df34c8cbb35929ffc_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2168

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads