48cafe0782db6c9aaf3206ab556014c6f87acd1917318b7ab6b29d695401ee31

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
23/01/2025, 17:45

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_19a9c810e43d27a9827a76f5111abf7f.exe
Size

118KB
MD5

19a9c810e43d27a9827a76f5111abf7f
SHA1

eae1f8d4a1c4dcd5c2d67ec089bf271dcaab8667
SHA256

48cafe0782db6c9aaf3206ab556014c6f87acd1917318b7ab6b29d695401ee31
SHA512

79cf139033c6c4077463d718b90ddffe1768ac0b990a3e9906ad0e192da6833b18acb1207f4016ebf9d3e53f589a3c862948d6736a4720fb467b8d31a3340c93
SSDEEP

1536:XvA1wReHcA2cEo+AtYe0lgsr9qEQkHZ8OgXKRGMPm5qijf8igaPcy2vK44PCQGnr:04oXYe0lNr045vYMPmHf8i8yqdjeC

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	JaffaCakes118_19a9c810e43d27a9827a76f5111abf7f.exe

C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_19a9c810e43d27a9827a76f5111abf7f.exe
"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_19a9c810e43d27a9827a76f5111abf7f.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2144

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...