22aa343bfb9b519cc9a0f7e8eb78d314647d0cb7cb8fd36bd0d5bf77552712a3

Analysis

max time kernel
94s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
19-01-2025 16:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_cceb23e1f79e7f9ee0d08bfb70bc29f1.exe
Size

803KB
MD5

cceb23e1f79e7f9ee0d08bfb70bc29f1
SHA1

79b7087a7bc699f7271c53e016f5ab983b0bfff8
SHA256

22aa343bfb9b519cc9a0f7e8eb78d314647d0cb7cb8fd36bd0d5bf77552712a3
SHA512

000f555c2f9adcb239771fb6000700fa4c34b084be816e335f61957e7309cdf9cc27eb8a9f2726ffc94d00bb8cfbd2536f7c5fe732679db8036950c2409c104f
SSDEEP

12288:p48QIHbAQHZOCsS5gtGRz7aeRvNYFW55LN7FsyNlVMcxZpTj96RqaZeYES:GfI7zsS5gtGtVLYWecVMoZpTjH8eTS

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	JaffaCakes118_cceb23e1f79e7f9ee0d08bfb70bc29f1.exe

C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_cceb23e1f79e7f9ee0d08bfb70bc29f1.exe
"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_cceb23e1f79e7f9ee0d08bfb70bc29f1.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1852

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads