54b1fdb7ca79a4008bb6accf314ad0b11a1f194b45938af808333493d65d5bb8

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20250217-en
resource tags

arch:x64arch:x86image:win10v2004-20250217-enlocale:en-usos:windows10-2004-x64system
submitted
06/03/2025, 08:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_55922f01e6ddd561584227808c4bf069.exe
Size

144KB
MD5

55922f01e6ddd561584227808c4bf069
SHA1

5c75ef4e75145381b54cbaab5bfcf2f380f8006c
SHA256

54b1fdb7ca79a4008bb6accf314ad0b11a1f194b45938af808333493d65d5bb8
SHA512

334fd6a47cf921fe7f3be2a4c0bb07fef575a307e56de7407e66de75d0435b3502313c173ca88dfb7f0c9797a5b36b98d9c273688a4a361a38931cf9813a40e8
SSDEEP

3072:QchffwJwDSxAO+bj3MRkieevf5++qqUG9t+6w:QchoxIEkZSf5++qqZ/g

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	JaffaCakes118_55922f01e6ddd561584227808c4bf069.exe

C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_55922f01e6ddd561584227808c4bf069.exe
"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_55922f01e6ddd561584227808c4bf069.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4648

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads