b3fe0c40c0bd4be9afc193a116d5c72fc57a0ecd741681aa8b1ddaab0a1ce635

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
30-10-2024 04:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7de5411dd902a51655dbfcba3d4d4e54_JaffaCakes118.exe
Size

108KB
MD5

7de5411dd902a51655dbfcba3d4d4e54
SHA1

44189b8bc79723815d35ca5ec1c930bb2e84a7d8
SHA256

b3fe0c40c0bd4be9afc193a116d5c72fc57a0ecd741681aa8b1ddaab0a1ce635
SHA512

5a8a960e8a2c4fc900e320e2f39d37b75fb54c2f82f99fced99ee425d53788c72998c31e2864168fe63b5289adf58d31f874fda1f87d3e202a60c25519e7832e
SSDEEP

3072:9kd+m+Ti7IQiDisWnN4Opg/MZFjFJ34cbD74DYr:9kYjTmrDAQhJocbIDI

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7de5411dd902a51655dbfcba3d4d4e54_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\7de5411dd902a51655dbfcba3d4d4e54_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\7de5411dd902a51655dbfcba3d4d4e54_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1968

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads