bbb1f23c01a7128024cf748e2e7aef0b84f0c7a2bab9bc7b38538cd563100721

Analysis

max time kernel
139s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
17-10-2024 12:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

520e04df8ae066c314e9749f3158de3a_JaffaCakes118.exe
Size

32KB
MD5

520e04df8ae066c314e9749f3158de3a
SHA1

54cd12ff879f9b29f9e44fe76c621f61390aa558
SHA256

bbb1f23c01a7128024cf748e2e7aef0b84f0c7a2bab9bc7b38538cd563100721
SHA512

2117093cc9b4a9b92ba2a3dfe5b4ad70b05305f38f8fc7c7dc67cfa43b3265a8737de7f117cff266a958bca9be1adbd500b121fa54631bdb6fdf035e0c794738
SSDEEP

384:yQ3bXykJBqhz9QhtGSdYDTFS9XHSbOiQ3bXykJBqhz9QhtGSdYDTWS9XHSbO:ytrJ9Qhtn2qSOitrJ9Qhtn2vSO

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	520e04df8ae066c314e9749f3158de3a_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\520e04df8ae066c314e9749f3158de3a_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\520e04df8ae066c314e9749f3158de3a_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4268

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads