c937532d711f0db0fe72220d2450a17af6b5ace46a220fdd9f4a1164830dbc00

Analysis

max time kernel
95s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
02-12-2024 18:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b9aa236fdc5e112412af1969c338b295_JaffaCakes118.exe
Size

1.2MB
MD5

b9aa236fdc5e112412af1969c338b295
SHA1

545dc7f035e6590220ca0fae4317149e76ac9f4d
SHA256

c937532d711f0db0fe72220d2450a17af6b5ace46a220fdd9f4a1164830dbc00
SHA512

811124cac578d5b2f5987b3b8e98ea94b234d446fb5096463cd435dfceb14f1def69cec6da6a3bdcf1f2a2a559650e756d0e64a9cf6756d6bd0d40d68d0b651f
SSDEEP

24576:p+brd78a0DBZspWhcFn5TeMqpW7T9Bd81lehadVBOL6/S:Qd78a0dTQTew7T9BIgijOO

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	b9aa236fdc5e112412af1969c338b295_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\b9aa236fdc5e112412af1969c338b295_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\b9aa236fdc5e112412af1969c338b295_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2216

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads