5fe859db3c037aec854bf7fac26eebb4ef2b1fa6f4074cb70ecddf3a6f93141e

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
30-12-2024 00:46

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_5fe859db3c037aec854bf7fac26eebb4ef2b1fa6f4074cb70ecddf3a6f93141e.exe
Size

204KB
MD5

f74c64d5a475b6dc74837a0e839a1056
SHA1

3ae8b8843b465f06fa9f3231ead613ccc668d49a
SHA256

5fe859db3c037aec854bf7fac26eebb4ef2b1fa6f4074cb70ecddf3a6f93141e
SHA512

7dba734d78b2bbbccb88ceeacf91d652d282c6e9724be487fa6c8f42a17458afe759a8141947b2a93730b1bd45937a0d6a69963a182ada59ce5839dc9fc3390d
SSDEEP

3072:DOLPUPSuVr3lo7c+nNX7Ub6p/SfGvljMrv4M8HCvRcuNL3IYMDMqqDYFf:DO7U6uVbZKIGvljMr78inIzwqqDYFf

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
204	3408	WerFault.exe	82

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	JaffaCakes118_5fe859db3c037aec854bf7fac26eebb4ef2b1fa6f4074cb70ecddf3a6f93141e.exe

C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_5fe859db3c037aec854bf7fac26eebb4ef2b1fa6f4074cb70ecddf3a6f93141e.exe
"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_5fe859db3c037aec854bf7fac26eebb4ef2b1fa6f4074cb70ecddf3a6f93141e.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3408
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3408 -s 216
  2⤵
  - Program crash
  PID:204

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 3408 -ip 3408
1⤵
PID:2376

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads