463481e895a26addd0648fbe3e59e2dd7b78d33baff0ef0e74f3ac056eb6678f

Analysis

max time kernel
95s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
27-01-2025 04:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_3c04a5bb5600613fd29b03c08af6f891.exe
Size

196KB
MD5

3c04a5bb5600613fd29b03c08af6f891
SHA1

2890fdcdd9162e3c74c3e2e268e32b0ae556bd64
SHA256

463481e895a26addd0648fbe3e59e2dd7b78d33baff0ef0e74f3ac056eb6678f
SHA512

e0cefa75bee9643d29207573ba91cc4b013a0ac9deb6320294e523b425bd31f6134c4052ad11658f2140272a1c0dedab09863cdfaeb000d5d7a096c0945a0beb
SSDEEP

3072:PknR+1TSRhN3Kxig3hlikUjFro1W5aG1kKj:x1Ohuiwi+kX9

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2060	4788	WerFault.exe	81

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	JaffaCakes118_3c04a5bb5600613fd29b03c08af6f891.exe

C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_3c04a5bb5600613fd29b03c08af6f891.exe
"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_3c04a5bb5600613fd29b03c08af6f891.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4788
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4788 -s 280
  2⤵
  - Program crash
  PID:2060

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4788 -ip 4788
1⤵
PID:4648

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads