e73d001cc8bba043bfac29587b06ab4bbade19a7ef0fe4cb9395465459bd4f58

Analysis

max time kernel
11s
max time network
19s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
08-10-2024 23:35

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

271e17df1078eb92cf3b3dc6cb456523_JaffaCakes118.exe
Size

6.6MB
MD5

271e17df1078eb92cf3b3dc6cb456523
SHA1

e36bdd1fc4c1b6834c34ba790c7a41a571489af6
SHA256

e73d001cc8bba043bfac29587b06ab4bbade19a7ef0fe4cb9395465459bd4f58
SHA512

eeb433c77fc1453bcbbd958585f44cf9179bbefd0bb649ea2258c39cf26e5e7c3a19d07b7e423e15243350572b0ebc5172d2209c4c56a58cadc93e268ca2cddb
SSDEEP

196608:gxZEVpMeuujxW8bVSNmq0kG0dGXHvNtpmVTu7W1Y3Ozj:gxZEVpMe/0oEG0dGXHvLpkTyoY+zj

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	271e17df1078eb92cf3b3dc6cb456523_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\271e17df1078eb92cf3b3dc6cb456523_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\271e17df1078eb92cf3b3dc6cb456523_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2436

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\Bin\resources\plugins\Yahoo\HTML\blank.html

Filesize
471B

MD5
8adb616d567aa9bff9e4ae0706bccb3b

SHA1
0bbf2ce61145358a89cf4af14340071a9c680b8d

SHA256
5bc3f1f0e802f4143a88186e9eb7a8d0465bf788c04d109512ae73942f378be8

SHA512
1d1b08ef9ee0a47ae2888711b042229c66e1d2d1dacb705d820793300670f81de7a62f8f117dfe8de406133d778519519bde3205e9914658256c8f8b6181bcbf

Download Submit
C:\Users\Admin\AppData\Local\Temp\Bin\resources\plugins\Yahoo\HTML\error.html

Filesize
723B

MD5
b7c7467f89925c675476492aed843958

SHA1
3357ffd23d718bf60ce999a1f82987a40da4ae0e

SHA256
690db044770f1d0e1d9350ff3bb41a5151a0a75c47d7dbef50e48efbae14d656

SHA512
cf4ba2f79dc908c8e6d73cb9f7399e2993df47604f7c9f8332c4f1cbcdca6d5756219930c9e526fd0e909be8c60feb13bf16fefc112cb97d47c34939afcacdd1

Download Submit