2e22b9dfbaf2706513c9b2cce666109e89c6982f2ef8aaf7800d5c09b2fe7a40

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
20/01/2025, 12:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
JaffaCakes118_e76c5cab93889205e1164cd7b9fa3f87.exe
Size 261KB
Sample250120-ps7e3ayret
SHA256 2e22b9dfbaf2706513c9b2cce666109e89c6982f2ef8aaf7800d5c09b2fe7a40
MD5 e76c5cab93889205e1164cd7b9fa3f87
SHA1 d30dff3bc86d564e8a83d2e2ee75991db3c6b3a4
SHA512 9b5e8a7c54bf70e8c742f35a5180ca58e63693fa40d40136b88d8a97ec14d70169d3d0ad89c41b3090b920ed62d079c0b4cd4822893e991b315397ae69c8e0fa
SSDEEP 6144:sVBUNmwa38SsyUtYOp6TGpVZL49P8WKF90d9DqQkDij9F:sXmVVtYRKpVpgP8xz0d9DqQkDij9F
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	JaffaCakes118_e76c5cab93889205e1164cd7b9fa3f87.exe

C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e76c5cab93889205e1164cd7b9fa3f87.exe
"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e76c5cab93889205e1164cd7b9fa3f87.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5116

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5116-0-0x0000000000400000-0x0000000000483000-memory.dmp

Download