e35d5ef9a678126adfd9a5e6176b42db3dea5f7b22401ebac09f45d8c30f5771

Analysis

max time kernel
92s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
03-10-2024 15:05

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0f4aa004aee5f2db469d2feaae74ed74_JaffaCakes118.exe
Size

168KB
MD5

0f4aa004aee5f2db469d2feaae74ed74
SHA1

27e5b47b0869fb6a5dd5e6368b76a36c7be34862
SHA256

e35d5ef9a678126adfd9a5e6176b42db3dea5f7b22401ebac09f45d8c30f5771
SHA512

b1259f6b95b184b43e71de9c626f1fda3c0d9bcf6c519e18061ac6392319086d2e7804507c7504a555eb0fdd9aef4673dde7289055ed24b145d4e27b27909657
SSDEEP

3072:U+kkbnMLxqAc4rZ/gTi7J5wz9sAG/nZ/Ofk:UQYLMs9gTCJ5wzWAGPdKk

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	0f4aa004aee5f2db469d2feaae74ed74_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\0f4aa004aee5f2db469d2feaae74ed74_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\0f4aa004aee5f2db469d2feaae74ed74_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4456

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads