732e684db464ddbaedae1ae6596f7b29249e99b34d320b9f55280ca261ffd61b

Analysis

max time kernel
150s
max time network
113s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/09/2026, 08:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118__84c9e2cec8a7cbedf672a45f363bf209.exe
Size 593KB
Sample260919-kcdqlazz9m
SHA256 732e684db464ddbaedae1ae6596f7b29249e99b34d320b9f55280ca261ffd61b
MD5 84c9e2cec8a7cbedf672a45f363bf209
SHA1 d7acefcc74fb2d4f3490e2266095e319a236b3db
SHA512 789e3ebfd8dad78378d80588a1d54e4dd8c4f989e5eb7de626a743f488065332a334c41af5a50133ef41f0f35b0a54399b6101d628a1f40e19aaa815f5668f0c
SSDEEP 12288:tUwvNzkkqK+ZkMbEvRAbgh5DWFzLFAHKs3bQk5qXlOz:tUwvNz9qK+ZjmAbg76zLFAHKIbv5q1Oz
TLSH
T1CCD423417722D00ACC750B386A6D88EBEE912F11EA00624377927F4F7F2799753A81E7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 5 IoCs

pid	Process
3908	jaffacakes118__84c9e2cec8a7cbedf672a45f363bf209.exe
3908	jaffacakes118__84c9e2cec8a7cbedf672a45f363bf209.exe
3908	jaffacakes118__84c9e2cec8a7cbedf672a45f363bf209.exe
3908	jaffacakes118__84c9e2cec8a7cbedf672a45f363bf209.exe
3908	jaffacakes118__84c9e2cec8a7cbedf672a45f363bf209.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118__84c9e2cec8a7cbedf672a45f363bf209.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118__84c9e2cec8a7cbedf672a45f363bf209.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118__84c9e2cec8a7cbedf672a45f363bf209.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:3908

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

InstDll.dll

Path C:\Users\Admin\AppData\Local\Temp\bdtmp\InstDll.dll
Size 4KB
SHA256 5a449a8daf50957499e3a623d85f9d13c0bee446bd1389ab09c62dc711f7b83c
MD5 884b680357ba59a512dda26c1032922d
SHA1 55c99c30fe77ea79826bc78d74e830024365479b
SHA512 69add831d940cebc74352131705c673537d960063ce8f5c4ba76bec421af4ece8bae4bfbdac3491854da2acb3b6cf4872b141a19f091faa260ba8bcf00cc6426
SSDEEP 48:KVhJ6t/YHDJcmCqbcGIAHHzFjZ5jdp6tbN6oBB1xbz:KhI1YBCqcYTFjZVYbNfBBPz
TLSH
T132A1B7632AC4DFBAE3DD2331069F121F616928600AD2044FAB5C4E4A8D63D5B8375F47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InstallOptions.dll

Path C:\Users\Admin\AppData\Local\Temp\nsp1BDD.tmp\InstallOptions.dll
Size 12KB
SHA256 8203ae1589a50e6ff012e5d27bdd4f8ed7506077ca9b052827f5e90aaeb98519
MD5 1e8f2fefe3ce893b117b26948b8978cb
SHA1 59cfc6c3f5716e91609e54ca80ae8b06c93ef8ab
SHA512 b3c36e1aa5d3ee5f482f4175a7d6fe10cf2bf3bd3423ab4266d11c4181cfbc7e3f66a30855034a8ec026a4d5987598f0116e98519b7445d9e5687bcbab2c0e5c
SSDEEP 192:qzixixDOHhG9db9rd+oSVPECMlh3I8tqDyng7hwbbHF1QuCb:qOx0DOHqrdwTY6+ng72bbMum
TLSH
T135421A622384DCF3E789423AB45236136B96962679516ED1C7330FC67A230897EF6353
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsp1BDD.tmp\System.dll
Size 10KB
SHA256 7a24883bdbf08ce90938094b6ab6f09a842af10b18b8ae4d70da2e6b806490b8
MD5 10c44246d99a1c2e5f5e6b52b111a63d
SHA1 0f41da79c3e789f4ae38738e3a5d73c538f8af4f
SHA512 e5b0fa27cd02a67be5eb9c63646621d3e9ccfada98659c50dee8310a58ce12e1a6a059788b85f0f440067ed7e281a0e1a526b9403993b9000f91a51bfbb50da3
SSDEEP 192:rOSsJI/rqmIDNLU0dq51EgAiNbubv6rLZ:lHQQ0d01Egbq76r
TLSH
T12F225C51426442F3DD55823C08A739272F787B249EA18EC3CF9364466F199BABC7D33A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsp1BDD.tmp\ioSpecial.ini
Size 514B
SHA256 203fdfd4017cec90d6fef3c1246412dbd4342a3f1fd8d4fc832e66a28ccc6de9
MD5 42f16b348e2b39215057a9877f37ed7f
SHA1 04543f058926c99a5d06583a6d88fa5a95245b02
SHA512 e88e91efb37708bda302da6fdaaaa00b50d1fcfb9347110b7700d9fdb5931aad06890a3449beeb58d3ce0f59f3c3757f84106afe5b101c10de83063fcb6c6414
TLSH
T155F05984821A832944309542A9BA379A17E02D304B013DF5F9334C47A74CDD5DDE96C2
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads