26d00f125d520d1c60376083270b2dbe7f3e9484f8b299a5dd87b49728be9aff

Analysis

max time kernel
148s
max time network
147s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/09/2026, 16:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118__9f996b5715a1af44b2ab96ff140b9b09.exe
Size 136KB
Sample260919-t42feahc78
SHA256 26d00f125d520d1c60376083270b2dbe7f3e9484f8b299a5dd87b49728be9aff
MD5 9f996b5715a1af44b2ab96ff140b9b09
SHA1 66e8ce654ced8e3f840d5687baed6ae030f59155
SHA512 bbc98cde17206d02dac0a37396e12ef65b52d6b54334b3643e027b922f0ee705143a41bd118540c5581d71e8ca7ba57672846fda0728bc2badee4ed2292d6366
SSDEEP 3072:ixoHFCkuFd/F39YcCIBgLLizCe/0r5ZqVFCku:7uhbYcTBgSzCeMr5ZW
TLSH
T17DD3A416F605D40CE10981B5BD25C1AF38067E724090AE27BBC2BF9F36B55E3B9A5A07
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118__9f996b5715a1af44b2ab96ff140b9b09.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2252	jaffacakes118__9f996b5715a1af44b2ab96ff140b9b09.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118__9f996b5715a1af44b2ab96ff140b9b09.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118__9f996b5715a1af44b2ab96ff140b9b09.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2252

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4856

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads