0e8151b85637b25c22bf33a83280dcccdad86803816afb753a236b38d76e91ef

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
24-01-2025 18:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_245daee68eea89ca3a91075c41fb7a62.exe
Size

176KB
MD5

245daee68eea89ca3a91075c41fb7a62
SHA1

b48dc350211830608197e895bc35c7bab80fc931
SHA256

0e8151b85637b25c22bf33a83280dcccdad86803816afb753a236b38d76e91ef
SHA512

6e5c08e63b26b96e2e0845b2341a2dac6c72a6d95aa714c3dd7073b20aee77e57ef05b6b33ce325f2b94f7cd0c3bc9f66b1320380077825f21f2e674f96d1774
SSDEEP

3072:s9m82KS3gIf/zsadINGlYQHuM9ATNN/cMFAByiP3ioi6ZYn04PctBkeaiWTISh:s9PkgInwGImH9WTDcxByiPc6an90t2ew

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1612	4424	WerFault.exe	82

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	JaffaCakes118_245daee68eea89ca3a91075c41fb7a62.exe

C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_245daee68eea89ca3a91075c41fb7a62.exe
"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_245daee68eea89ca3a91075c41fb7a62.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4424
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4424 -s 284
  2⤵
  - Program crash
  PID:1612

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4424 -ip 4424
1⤵
PID:4536

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads