a28b8b68cd03f2f11afedc601cc05a23caf0321af61897edb06780704464eaea

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
05/10/2024, 05:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

16549ab8e181a5924def098a0b6ef995_JaffaCakes118.exe
Size

6KB
MD5

16549ab8e181a5924def098a0b6ef995
SHA1

71fc0b134a04eea54c21a37846c6bf5e3aa62fe6
SHA256

a28b8b68cd03f2f11afedc601cc05a23caf0321af61897edb06780704464eaea
SHA512

dde1cbe1a849cc53f67227f6c6ecf91d1f41b0b2c740eb80633db0ac1a6320f82543c1fc5154edaed2b217b2a19d276140c81f8a89439410253484d3676a89d8
SSDEEP

96:Zuj+jWyb7tOtMv80XIh9dXZxMhiGcjGk:I+jWJCk0XYIiGIGk

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	16549ab8e181a5924def098a0b6ef995_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\16549ab8e181a5924def098a0b6ef995_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\16549ab8e181a5924def098a0b6ef995_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1508

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads