c846dc3ca4e9867d7fc1fc12d5d43064b170ee596af51f0c8e5c3a4f5ab64978

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
02-01-2025 22:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_68af82270fe34203ef22418bc5f14230.exe
Size

130KB
MD5

68af82270fe34203ef22418bc5f14230
SHA1

0fe8232bad49042bd384911904e70e91b6f5bb0f
SHA256

c846dc3ca4e9867d7fc1fc12d5d43064b170ee596af51f0c8e5c3a4f5ab64978
SHA512

c5ed9b1252fa69809cfef90255cb00a04476f7312c3a217e287d3980e6ebf4e3b722edc41f61f29321344779af7a0490b660c6885dd22a6c3babf51277151cd4
SSDEEP

3072:4oSLc0rCRT0r8l1S7uzrupNpzCFmZZEjAHnXfaUMs8OrQ:jSLJCFKQ1S7uzgjDZZESis8SQ

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
448	4212	WerFault.exe	82

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	JaffaCakes118_68af82270fe34203ef22418bc5f14230.exe

C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_68af82270fe34203ef22418bc5f14230.exe
"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_68af82270fe34203ef22418bc5f14230.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4212
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4212 -s 400
  2⤵
  - Program crash
  PID:448

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4212 -ip 4212
1⤵
PID:4524

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads