68ab85ffce98d9215ccde9c8f2d108915b583291b8b79d6c519c10a1706525f1

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/09/2026, 23:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118__d1c37ddd02abb45d2c200c8bea76283b.exe
Size 21KB
Sample260917-3dwlxaec59
SHA256 68ab85ffce98d9215ccde9c8f2d108915b583291b8b79d6c519c10a1706525f1
MD5 d1c37ddd02abb45d2c200c8bea76283b
SHA1 39a745872b1e86d3ad765c9b5b03e00274e5fad7
SHA512 3bc127e80867c9fd635c02dcfab6db1c9d5917e8bafbb246128291fdcb4cd74e17b67c9a1158b6d66c90ef62d01172a9b9d05c38a83601c00e43261651465e25
SSDEEP 384:W9xRf0VQFe4qtN9sjxL8CJnXWRqsiYQ/yQjFliWSUex1sfd:WPBF4aLX4qvbhliWpQU
TLSH
T185A24C61E2FCCA92F2E727F546FEC0AD5D2BBC3E09938E4A1549510E1855E10C62CB2B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/1312-0-0x0000000000400000-0x000000000040F000-memory.dmp	upx
behavioral2/memory/1312-1-0x0000000000400000-0x000000000040F000-memory.dmp	upx

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118__d1c37ddd02abb45d2c200c8bea76283b.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118__d1c37ddd02abb45d2c200c8bea76283b.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118__d1c37ddd02abb45d2c200c8bea76283b.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1312

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1312-0-0x0000000000400000-0x000000000040F000-memory.dmp

Download

memory/1312-1-0x0000000000400000-0x000000000040F000-memory.dmp