b3cf48700ea8674ebddb7689aef2e312c57b64d02b572b8fc58563f883046e46

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
30-11-2024 05:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b4f06b7f60e85d919f44856d5a6d722f_JaffaCakes118.exe
Size

152KB
MD5

b4f06b7f60e85d919f44856d5a6d722f
SHA1

184b17b3a3e27d1029092640652dd9e9be6ff707
SHA256

b3cf48700ea8674ebddb7689aef2e312c57b64d02b572b8fc58563f883046e46
SHA512

4b3905509e6515e61baa41c92f11b9da8677645157364c10c21b0505496ca0b074dba445077bc3bb2db3a03ed8c3332255675f236b36a1728615e06975e7fff2
SSDEEP

3072:AnJ0z5wHAPMBCq3/R9lqnScdb0g6EWqofD2zs/v:M0z5DWJ9l4N0g6Ozs/v

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	b4f06b7f60e85d919f44856d5a6d722f_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\b4f06b7f60e85d919f44856d5a6d722f_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\b4f06b7f60e85d919f44856d5a6d722f_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4244

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads