6cf92f7489d93cc2a726457e4b5dcca8c509cb09f72f560358b9244ee27e1671

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
18/10/2024, 06:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

55f72af5ac777fa61ae3de1b827d2961_JaffaCakes118.exe
Size

831KB
MD5

55f72af5ac777fa61ae3de1b827d2961
SHA1

42e7f6ded924bc6a0301fa5fa2a9669f041791a3
SHA256

6cf92f7489d93cc2a726457e4b5dcca8c509cb09f72f560358b9244ee27e1671
SHA512

e7af623fc3f30bd3e113a162168390c7757d46679dd329665643d1ce4f3f19480297998005bcd5b9cc78e05c1fc1fd107287f956b345235f7c803a04e356076a
SSDEEP

12288:Xny2dqq0Q1a3brTmQjwd8flI23CRma9+G9kIqDrw0Vtez5kTxEHVP8TVyLmg/TU5:iOqHAaqQnIpmFIqDr7mz5kTk8TELT0t

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	55f72af5ac777fa61ae3de1b827d2961_JaffaCakes118.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.key	55f72af5ac777fa61ae3de1b827d2961_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.key\	55f72af5ac777fa61ae3de1b827d2961_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.key\ = "regfile"	55f72af5ac777fa61ae3de1b827d2961_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\55f72af5ac777fa61ae3de1b827d2961_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\55f72af5ac777fa61ae3de1b827d2961_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:4432

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\controller.ini

Filesize
43B

MD5
f7a6652b7324229286d4ec3a4c052e69

SHA1
b0d6a3c9fa29ee10b81116e01c284036b151acf0

SHA256
e89743d1e3aee0803535871231bd19396784a040c7390ab0109e4be2d4ba4379

SHA512
04b007d99486f36bf31320c27fde9b31b7ec2df5d3c664d3a697290dc2359b4ab9de0ce80de9035955dda744abf6760cf3a4a2f48cfaeeaee4f81bbeaf88217f

Download Submit
memory/4432-0-0x0000000000400000-0x000000000076A000-memory.dmp

Filesize
3.4MB

Download
memory/4432-1-0x0000000000D60000-0x0000000000D95000-memory.dmp

Filesize
212KB

Download
memory/4432-20-0x00000000026F0000-0x00000000026F1000-memory.dmp

Filesize
4KB

Download
memory/4432-19-0x00000000026F0000-0x00000000026F1000-memory.dmp

Filesize
4KB

Download
memory/4432-18-0x00000000026F0000-0x00000000026F1000-memory.dmp

Filesize
4KB

Download
memory/4432-17-0x00000000026F0000-0x00000000026F1000-memory.dmp

Filesize
4KB

Download
memory/4432-16-0x00000000026F0000-0x00000000026F1000-memory.dmp

Filesize
4KB

Download
memory/4432-15-0x00000000026F0000-0x00000000026F1000-memory.dmp

Filesize
4KB

Download
memory/4432-14-0x00000000026F0000-0x00000000026F1000-memory.dmp

Filesize
4KB

Download
memory/4432-13-0x00000000026F0000-0x00000000026F1000-memory.dmp

Filesize
4KB

Download
memory/4432-12-0x00000000026F0000-0x00000000026F1000-memory.dmp

Filesize
4KB

Download
memory/4432-11-0x00000000026F0000-0x00000000026F1000-memory.dmp

Filesize
4KB

Download
memory/4432-10-0x0000000002700000-0x0000000002701000-memory.dmp

Filesize
4KB

Download
memory/4432-9-0x0000000002700000-0x0000000002701000-memory.dmp

Filesize
4KB

Download
memory/4432-8-0x0000000002700000-0x0000000002701000-memory.dmp

Filesize
4KB

Download
memory/4432-7-0x0000000002700000-0x0000000002701000-memory.dmp

Filesize
4KB

Download
memory/4432-6-0x0000000002700000-0x0000000002701000-memory.dmp

Filesize
4KB

Download
memory/4432-5-0x00000000026F0000-0x00000000026F1000-memory.dmp

Filesize
4KB

Download
memory/4432-4-0x00000000026F0000-0x00000000026F1000-memory.dmp

Filesize
4KB

Download
memory/4432-3-0x00000000026F0000-0x00000000026F1000-memory.dmp

Filesize
4KB

Download
memory/4432-2-0x00000000026F0000-0x00000000026F1000-memory.dmp

Filesize
4KB

Download
memory/4432-24-0x00000000026F0000-0x00000000026F1000-memory.dmp

Filesize
4KB

Download
memory/4432-22-0x00000000026F0000-0x00000000026F1000-memory.dmp

Filesize
4KB

Download
memory/4432-23-0x00000000026F0000-0x00000000026F1000-memory.dmp

Filesize
4KB

Download
memory/4432-21-0x0000000002700000-0x0000000002701000-memory.dmp

Filesize
4KB

Download
memory/4432-34-0x0000000002750000-0x0000000002751000-memory.dmp

Filesize
4KB

Download
memory/4432-33-0x0000000002750000-0x0000000002751000-memory.dmp

Filesize
4KB

Download
memory/4432-32-0x0000000002750000-0x0000000002751000-memory.dmp

Filesize
4KB

Download
memory/4432-31-0x0000000002750000-0x0000000002751000-memory.dmp

Filesize
4KB

Download
memory/4432-30-0x0000000002750000-0x0000000002751000-memory.dmp

Filesize
4KB

Download
memory/4432-29-0x0000000002750000-0x0000000002751000-memory.dmp

Filesize
4KB

Download
memory/4432-28-0x0000000002750000-0x0000000002751000-memory.dmp

Filesize
4KB

Download
memory/4432-27-0x0000000002750000-0x0000000002751000-memory.dmp

Filesize
4KB

Download
memory/4432-26-0x0000000002740000-0x0000000002741000-memory.dmp

Filesize
4KB

Download
memory/4432-25-0x00000000026F0000-0x00000000026F2000-memory.dmp

Filesize
8KB

Download
memory/4432-35-0x0000000000400000-0x000000000076A000-memory.dmp

Filesize
3.4MB

Download
memory/4432-36-0x0000000000D60000-0x0000000000D95000-memory.dmp

Filesize
212KB

Download
memory/4432-38-0x0000000002700000-0x0000000002701000-memory.dmp

Filesize
4KB

Download
memory/4432-37-0x00000000026F0000-0x00000000026F1000-memory.dmp

Filesize
4KB

Download
memory/4432-44-0x0000000002710000-0x0000000002711000-memory.dmp

Filesize
4KB

Download
memory/4432-43-0x0000000002720000-0x0000000002721000-memory.dmp

Filesize
4KB

Download
memory/4432-42-0x0000000002730000-0x0000000002731000-memory.dmp

Filesize
4KB

Download
memory/4432-41-0x0000000000920000-0x0000000000921000-memory.dmp

Filesize
4KB

Download
memory/4432-40-0x0000000000910000-0x0000000000911000-memory.dmp

Filesize
4KB

Download
memory/4432-39-0x00000000026E0000-0x00000000026E1000-memory.dmp

Filesize
4KB

Download
memory/4432-91-0x0000000002750000-0x0000000002751000-memory.dmp

Filesize
4KB

Download
memory/4432-90-0x0000000002750000-0x0000000002751000-memory.dmp

Filesize
4KB

Download
memory/4432-89-0x0000000002750000-0x0000000002751000-memory.dmp

Filesize
4KB

Download
memory/4432-88-0x0000000002750000-0x0000000002751000-memory.dmp

Filesize
4KB

Download
memory/4432-87-0x0000000002750000-0x0000000002751000-memory.dmp

Filesize
4KB

Download
memory/4432-86-0x0000000002750000-0x0000000002751000-memory.dmp

Filesize
4KB

Download
memory/4432-85-0x0000000002750000-0x0000000002751000-memory.dmp

Filesize
4KB

Download
memory/4432-84-0x0000000002740000-0x0000000002741000-memory.dmp

Filesize
4KB

Download
memory/4432-92-0x0000000002750000-0x0000000002751000-memory.dmp

Filesize
4KB

Download
memory/4432-93-0x0000000000400000-0x000000000076A000-memory.dmp

Filesize
3.4MB

Download
memory/4432-97-0x0000000000400000-0x000000000076A000-memory.dmp

Filesize
3.4MB

Download
memory/4432-100-0x0000000000400000-0x000000000076A000-memory.dmp

Filesize
3.4MB

Download
memory/4432-104-0x0000000000400000-0x000000000076A000-memory.dmp

Filesize
3.4MB

Download
memory/4432-107-0x0000000000400000-0x000000000076A000-memory.dmp

Filesize
3.4MB

Download
memory/4432-115-0x0000000000400000-0x000000000076A000-memory.dmp

Filesize
3.4MB

Download
memory/4432-118-0x0000000000400000-0x000000000076A000-memory.dmp

Filesize
3.4MB

Download
memory/4432-122-0x0000000000400000-0x000000000076A000-memory.dmp

Filesize
3.4MB

Download
memory/4432-125-0x0000000000400000-0x000000000076A000-memory.dmp

Filesize
3.4MB

Download
memory/4432-136-0x0000000000400000-0x000000000076A000-memory.dmp

Filesize
3.4MB

Download
memory/4432-139-0x0000000000400000-0x000000000076A000-memory.dmp

Filesize
3.4MB

Download