ee24ca76fb5eb3a2f79e4fb54ec637bb38c62a28e0e819744260fffe9aee220d

Analysis

max time kernel
134s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
22/10/2024, 04:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
68ed958a9f7e666df8dd4ce0ba6403df_JaffaCakes118.exe
Size 41KB
Sample241022-e7qqraxfrb
SHA256 ee24ca76fb5eb3a2f79e4fb54ec637bb38c62a28e0e819744260fffe9aee220d
MD5 68ed958a9f7e666df8dd4ce0ba6403df
SHA1 90650f18fbac13db3c42485270a7ce61aba7dc17
SHA512 a1ebca336eb5ef0715ca0ecc691ec07b60397edc3352c2659c94aa0040f852ab7b856f949d172549ac21ccfe5f57e6a33b12d3d6d6b7dfd703b62264e10373bd
SSDEEP 768:H7r572SvOgSG1sbO3ChUhVcRtu6RfAJ4XwkQuu:HpCSvOCGxOsVbgpu
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	68ed958a9f7e666df8dd4ce0ba6403df_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\68ed958a9f7e666df8dd4ce0ba6403df_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\68ed958a9f7e666df8dd4ce0ba6403df_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1592

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads