2e22b9dfbaf2706513c9b2cce666109e89c6982f2ef8aaf7800d5c09b2fe7a40

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
20-01-2025 12:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_e76c5cab93889205e1164cd7b9fa3f87.exe
Size

261KB
MD5

e76c5cab93889205e1164cd7b9fa3f87
SHA1

d30dff3bc86d564e8a83d2e2ee75991db3c6b3a4
SHA256

2e22b9dfbaf2706513c9b2cce666109e89c6982f2ef8aaf7800d5c09b2fe7a40
SHA512

9b5e8a7c54bf70e8c742f35a5180ca58e63693fa40d40136b88d8a97ec14d70169d3d0ad89c41b3090b920ed62d079c0b4cd4822893e991b315397ae69c8e0fa
SSDEEP

6144:sVBUNmwa38SsyUtYOp6TGpVZL49P8WKF90d9DqQkDij9F:sXmVVtYRKpVpgP8xz0d9DqQkDij9F

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	JaffaCakes118_e76c5cab93889205e1164cd7b9fa3f87.exe

C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e76c5cab93889205e1164cd7b9fa3f87.exe
"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e76c5cab93889205e1164cd7b9fa3f87.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5116

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5116-0-0x0000000000400000-0x0000000000483000-memory.dmp

Filesize
524KB

Download