2b3d2264619e270dc2cfcb24c99dd7554abe6677ead84131300bc015f0207ceb

Analysis

max time kernel
148s
max time network
136s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/08/2026, 23:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
JF Loader.exe
Size 90KB
Sample260809-3ff91afk7z
SHA256 2b3d2264619e270dc2cfcb24c99dd7554abe6677ead84131300bc015f0207ceb
MD5 b2a5d2b726b5febc204e6f2d07b82334
SHA1 0e50db0e2444e0b1af78d5bec6c27f7b73339d23
SHA512 d49f6b4ae4e832ce6c7f0823d232ef6dd119241dd7f1a90da050acba6332f37c88d0bb7a33ed8a7de9ed8e00786d25e9b867d1babb742a7c5fc28bc3a8c8b3ec
SSDEEP 1536:0lcZIvtjVWDQJrza5Ay26tjZtCXAQVy7bKR90kkOn5r5KYZR1rY0nOLFL:0lmY+DQJ+5a6hZYHYClkO5rp1rY0nCL
TLSH
T1729302176BB81108F343C73791E14AE1F3A69E721221A19D654AAEEDF8B0D03EB43E14
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	JF Loader.exe

C:\Users\Admin\AppData\Local\Temp\JF Loader.exe
"C:\Users\Admin\AppData\Local\Temp\JF Loader.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4620

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4620-0-0x0000000000400000-0x000000000042A000-memory.dmp

Download

memory/4620-1-0x0000000000400000-0x000000000042A000-memory.dmp