386b240795719a7ee5234a71d6f43c4690d03284a20512dd4c2494b97c8a9e09

Analysis

max time kernel
94s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
08/10/2024, 20:13

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

24d0ed9d5344a38c4202e0ba1ab4d5d0_JaffaCakes118.exe
Size

13KB
MD5

24d0ed9d5344a38c4202e0ba1ab4d5d0
SHA1

fa04cc2c4d42826eaebb68fe4dd24cffb4f991a1
SHA256

386b240795719a7ee5234a71d6f43c4690d03284a20512dd4c2494b97c8a9e09
SHA512

03c6acae3504bbbb71720ac3122926475c917ff602982f6d397f231e42cb83bd66917ad01675a2804860c0b6d739a0e8d29a87ff424bea566d8232371c323696
SSDEEP

96:2z+U17qNd0lGJmYmMyrdy/N6viQSFxbKZqEZ2K3Ju6ZFjUWkFql2kuVI:187qWGurdhvidrWjuECWkFYf

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	24d0ed9d5344a38c4202e0ba1ab4d5d0_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\24d0ed9d5344a38c4202e0ba1ab4d5d0_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\24d0ed9d5344a38c4202e0ba1ab4d5d0_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1156

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads