be3e96d6b518852ee414111473ef226717fde98ed4ea36ad95f710838407ad4f

Analysis

max time kernel
96s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
22-12-2024 19:12

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_be3e96d6b518852ee414111473ef226717fde98ed4ea36ad95f710838407ad4f.exe
Size

39.5MB
MD5

14278d9600102c060b8c96700404b125
SHA1

9c94a384a38df66cbc4e0d729692c8fac6630bce
SHA256

be3e96d6b518852ee414111473ef226717fde98ed4ea36ad95f710838407ad4f
SHA512

9b1a0db9c29f634926ebffeb3ff44b8dcd2b0f1515814df0f35efc790d2195337810bf8342a81cf8caa594142383ba3cf8445465405d010d207f4d57f86480fd
SSDEEP

3072:v1EMGexnGRY184GOgMXwBiELjHSp2MSeuri:v1n11c4QVPHBMB

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4256	4352	WerFault.exe	82

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	JaffaCakes118_be3e96d6b518852ee414111473ef226717fde98ed4ea36ad95f710838407ad4f.exe

C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_be3e96d6b518852ee414111473ef226717fde98ed4ea36ad95f710838407ad4f.exe
"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_be3e96d6b518852ee414111473ef226717fde98ed4ea36ad95f710838407ad4f.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4352
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4352 -s 220
  2⤵
  - Program crash
  PID:4256

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 376 -p 4352 -ip 4352
1⤵
PID:1308

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads