34ee1fc5ba2591e0b922681c4db53c2e8053e017286ec84ec804ca8b6678e67a

Analysis

max time kernel
78s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20250217-en
resource tags

arch:x64arch:x86image:win10v2004-20250217-enlocale:en-usos:windows10-2004-x64system
submitted
02/03/2025, 05:45

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_3e40b5cc39a894dfa26dd093832d6ba1.exe
Size

148KB
MD5

3e40b5cc39a894dfa26dd093832d6ba1
SHA1

f5a646111337daa205b666167c4a45d1a0bf4c7d
SHA256

34ee1fc5ba2591e0b922681c4db53c2e8053e017286ec84ec804ca8b6678e67a
SHA512

1b2c2216dc43301a25d4815f1b09da1a0a1d317b1c5174dc09c907a1a460d2de2e49ac66cbd2d2f6fab0165a028b4143d6101bdff2260ce7e40998f1620bf26f
SSDEEP

3072:Y+mZTnv7VcsHTZUCieA/HG3/sw+H/lyII0lkvv:tYTnp9U3eim3j+4II0ls

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	JaffaCakes118_3e40b5cc39a894dfa26dd093832d6ba1.exe

C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_3e40b5cc39a894dfa26dd093832d6ba1.exe
"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_3e40b5cc39a894dfa26dd093832d6ba1.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2308

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads