b94344b668ab7f97199f67db1b193953eb2833c940a52ee653ff41a9b950ef0a

Analysis

max time kernel
149s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
06-12-2024 15:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

cdcfc8d58a06f1f6dfb355eb7e3b2355_JaffaCakes118.exe
Size

190KB
MD5

cdcfc8d58a06f1f6dfb355eb7e3b2355
SHA1

6f0135dc984d0c7889f092f9ecf03c5eedde9640
SHA256

b94344b668ab7f97199f67db1b193953eb2833c940a52ee653ff41a9b950ef0a
SHA512

14ebb1179a8c76ae4e3115344c55f443570422fda7a174323f91889fc75a8044b88fd7da26166133b9f24a32960a56977306c0e219b5d97b4d8a2e8790b30d15
SSDEEP

3072:hogDH6yOV7tnkgnK3A+xwoEajVjKL58PAZeo:ygYVJ5aRYyUn

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
980	4856	WerFault.exe	81

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cdcfc8d58a06f1f6dfb355eb7e3b2355_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\cdcfc8d58a06f1f6dfb355eb7e3b2355_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\cdcfc8d58a06f1f6dfb355eb7e3b2355_JaffaCakes118.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4856
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4856 -s 280
  2⤵
  - Program crash
  PID:980

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4856 -ip 4856
1⤵
PID:2420

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads