6a2329cba4df48cb3305a592dc65e4b39e643e2fa0f24ca77999939e2faa1f27

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
09/10/2024, 09:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

2ed474a24a0705c546ee4cb325e1cbf6_JaffaCakes118.exe
Size

608KB
MD5

2ed474a24a0705c546ee4cb325e1cbf6
SHA1

7b60f0c643f6944474518f5031a1493fac10e959
SHA256

6a2329cba4df48cb3305a592dc65e4b39e643e2fa0f24ca77999939e2faa1f27
SHA512

c38f5a76fef8049e5c16e26ee6d82e78e223109e2a1bd913b7ff3705e226397b39efdb22540569670ecf9dce8cfe61dd4a6374ed1bafe8f99657d00adb62e8df
SSDEEP

12288:FlarFIWkW5GNf2QQM/CTXsO9Dc3BbeaqTTkJuY:6xIK5GNf2QDKTXsO9Dc3jq/qH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2ed474a24a0705c546ee4cb325e1cbf6_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\2ed474a24a0705c546ee4cb325e1cbf6_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\2ed474a24a0705c546ee4cb325e1cbf6_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4472

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads