c408c3a9d61dec2b31c34eb6089cfcde61c97edbbbe038ae8f06d7b55fec7287

Analysis

max time kernel
148s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/09/2026, 08:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118__85ec19e597aec629eadf07b86ddc8bee.exe
Size 312KB
Sample260919-ksvdaadd53
SHA256 c408c3a9d61dec2b31c34eb6089cfcde61c97edbbbe038ae8f06d7b55fec7287
MD5 85ec19e597aec629eadf07b86ddc8bee
SHA1 eeea5d54e0677795c984652028cf2a5b5a52379b
SHA512 daf91379a942bf9d09603ec2386f3742cd93c4f3dac6e58cf8cd8006d3af5f8b71b715cf62757b1d359c4891e2c8f7e015d00c83d53276a9c8485cab02f9252b
SSDEEP 3072:wmA1ehl/69NcGiQAP6MmsCXHlcHjEcCduLwBVYQrt/RglsftY:wmDl/UcnPkFUjGbRs
TLSH
T16364E7CAD0AE465FDAB0427032D4D1AA55C28E43079745FBEB1A3C94B37FAE644CD263
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118__85ec19e597aec629eadf07b86ddc8bee.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118__85ec19e597aec629eadf07b86ddc8bee.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118__85ec19e597aec629eadf07b86ddc8bee.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5124

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

plf21F5.tmp

Path C:\Users\Admin\AppData\Local\Temp\plf21F5.tmp
Size 5KB
SHA256 55023b00e2c2401272d0ad7b4b633814869483b6d939c5d4910e4ff18eeeee6c
MD5 cfaec980a3639a6b33704c0db20cb812
SHA1 e9402b1deb9293d51ea7a45ff5aea0f5bff1ea8f
SHA512 72bb65180098c195ea74c7dacf24500d98bbd872149e4247bdc98b3a12fabd2fd6846a61b7d30e610748d49348c347a1cec5939276e3a0b30703aeeb591017b2
SSDEEP 96:Kq2orCnavjFYCac5ENA3jOpAWaMd1ZcMeJgocuEaegn:KopxYRcuU2NaM9eJ4aegn
TLSH
T1CEB1B76ED78653331592568A674923D1DF18B86C236313C4785EC08C3246794A7FF9F1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download