c2a4adc89c30e4909b91415d503e992c0b6d36dba358dcec06437d16f5d2b85f

Analysis

max time kernel
96s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
23-01-2025 19:54

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_1a9c2bcff5d99647e27b9405e4b3e38f.exe
Size

257KB
MD5

1a9c2bcff5d99647e27b9405e4b3e38f
SHA1

7fc7d38af77abfb21649ebfabd8542a00aa6d9e2
SHA256

c2a4adc89c30e4909b91415d503e992c0b6d36dba358dcec06437d16f5d2b85f
SHA512

6024bfd006249c717ff85fd71cb14c486bc62ceef287913cc3927e293d424582e5a029053d0f892171c1ecf8b70101ae1864f1f21bf923bd5a128c3e2eca8828
SSDEEP

6144:FD9sntZ8cWJOcUz6QYO7fvxc0Im3oFmO797QwnE4hMt:VSt+cWJOBOVO7vrIU67dDE4hM

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	JaffaCakes118_1a9c2bcff5d99647e27b9405e4b3e38f.exe

C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_1a9c2bcff5d99647e27b9405e4b3e38f.exe
"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_1a9c2bcff5d99647e27b9405e4b3e38f.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1620

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads