47a497216e3f266f77b0200b125c2c3dc88f444aa2f03dfc156ac9f332e2c120

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/09/2026, 22:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118__2d35bdd5e8ed2f6add65dfbf8af49e5a.exe
Size 112KB
Sample260919-2af7daty7p
SHA256 47a497216e3f266f77b0200b125c2c3dc88f444aa2f03dfc156ac9f332e2c120
MD5 2d35bdd5e8ed2f6add65dfbf8af49e5a
SHA1 018bde550cb5251b71f1e2e0c9bb31ad8edd05f6
SHA512 6a72fecea67d19febf3c979a3a05cf8e1f138ca679dfd2883abcea53d1a27295a7cb0c7798c84d4b0fdd08ac54a99a8e8eacde568d1f97786fd0cd4fe3c2b70c
SSDEEP 3072:AgkPKZAzwhAgsvg0drfnkA8nY2qrhrXV:AgByzwh30NkAOY2Ql
TLSH
T175B3AEB377A3204BF1509AB4C20A2B77C91DAEB06A455061D385FF5B673D6F2C62831B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2788	5468	WerFault.exe	88

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118__2d35bdd5e8ed2f6add65dfbf8af49e5a.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118__2d35bdd5e8ed2f6add65dfbf8af49e5a.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118__2d35bdd5e8ed2f6add65dfbf8af49e5a.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5468
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5468 -s 512
  2⤵
  - Program crash
  PID:2788

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 5468 -ip 5468
1⤵
PID:3736

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5468-0-0x0000000000580000-0x000000000058D000-memory.dmp

Download