e8410b011dd2300cddea48d95e221e7e4fc36e7e133bbb2de8717e802f78a88a

Analysis

max time kernel
148s
max time network
139s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/09/2026, 21:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118__b2ded4a42994c5ebf0ee4139240731c5.exe
Size 1.0MB
Sample260919-zvyk2syscv
SHA256 e8410b011dd2300cddea48d95e221e7e4fc36e7e133bbb2de8717e802f78a88a
MD5 b2ded4a42994c5ebf0ee4139240731c5
SHA1 d6340944da6571aa345343513c9b75f3e14dce8b
SHA512 b542f1b40a7a24136dd335334943703ce494e56325f4290dbebb84464d782df6bf103abf0066c4a38225623f145ce1c944ffb3db74dfa6fa215b772a7b2fbd15
SSDEEP 24576:DjnnACFb5OOUtkBde9TffPEJELJLOEu1vkZ4kC+KJCgkxmR4X6:Djn3vUtkB4rfPEJmFOEuE4kC+KBkE+6
TLSH
T1CE352302B4A45057FD03667246C95BF1DAB4DA6AFA3C4A01C7E01C698BB59C6EB3C3CD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118__b2ded4a42994c5ebf0ee4139240731c5.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118__b2ded4a42994c5ebf0ee4139240731c5.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118__b2ded4a42994c5ebf0ee4139240731c5.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1948

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1948-0-0x0000000000400000-0x0000000000426000-memory.dmp

Download