b02fbe4f967d5b2ec5bf1522127b80781120b92c6600a31150a5740e5d5ada9d

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
04/10/2024, 06:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

124a81cdfa5322eaf68401db411ecc81_JaffaCakes118.exe
Size

5KB
MD5

124a81cdfa5322eaf68401db411ecc81
SHA1

0f7dc69ee5bd8c5c5bb0d20aaf9c341ede2f15f2
SHA256

b02fbe4f967d5b2ec5bf1522127b80781120b92c6600a31150a5740e5d5ada9d
SHA512

c82dd0b37b0a74f2e76ace091217088aaae72ccc5b3c1421a5dbe1aaaec705d0d9202b823f04430adc9e151bee86a17f6692d449c56ac09ed470b32fc8a7f691
SSDEEP

48:ZvtQfORJeacDiaJGBNpHbnHDW9OhD9ip7Db3UR5m94SLtQ1:Z1y22BJGPpryghpiJ8zm4SLtQ

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	124a81cdfa5322eaf68401db411ecc81_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\124a81cdfa5322eaf68401db411ecc81_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\124a81cdfa5322eaf68401db411ecc81_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2368

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2368-0-0x0000000000400000-0x00000000004030B0-memory.dmp

Filesize
12KB

Download
memory/2368-1-0x0000000000400000-0x0000000000404000-memory.dmp

Filesize
16KB

Download
memory/2368-2-0x0000000000400000-0x00000000004030B0-memory.dmp

Filesize
12KB

Download