e6ccfe9b36b0a7cd344aaaba0614f869d4d1f648a7534c0732300e4bc71bbf1f

Analysis

max time kernel
148s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
17/10/2024, 18:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
5325d16bd59bcb5b50763fbc47f3518a_JaffaCakes118.exe
Size 44KB
Sample241017-xd5lxssflk
SHA256 e6ccfe9b36b0a7cd344aaaba0614f869d4d1f648a7534c0732300e4bc71bbf1f
MD5 5325d16bd59bcb5b50763fbc47f3518a
SHA1 fe3ca31f706c862e994dc69671726dc30b3159b5
SHA512 3fba774c7d528fcea16fdcfe9d1653b2a6723143d2452a7b9801f40a315b4a98c1675a025c30561e88d522362277cff6fe3a2e8540bac7cdb1fa3c16cff7ec1a
SSDEEP 384:+5n83/VB9xFjgIqI9R/eNjuE+lc83KIXzKsabrr+KC9j4yN4j9wLcxBNoZcVq:+K9Bx0DI912iHlzzavr+9mW2BNoZcY
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	5325d16bd59bcb5b50763fbc47f3518a_JaffaCakes118.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2920	5325d16bd59bcb5b50763fbc47f3518a_JaffaCakes118.exe
2920	5325d16bd59bcb5b50763fbc47f3518a_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\5325d16bd59bcb5b50763fbc47f3518a_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\5325d16bd59bcb5b50763fbc47f3518a_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:2920

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads