3c36e78c5946fc128850620201988b3c9611b3c8018af03f39b0ed8a5e328863

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/09/2026, 22:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118__285c8b50394d5c7147726e49596699b9.exe
Size 57KB
Sample260920-17f27ser31
SHA256 3c36e78c5946fc128850620201988b3c9611b3c8018af03f39b0ed8a5e328863
MD5 285c8b50394d5c7147726e49596699b9
SHA1 9b3b49bb7d58dc7fc7882b1dff16d0db27035545
SHA512 e3bd703c7c9cbea621045eefd1d912ed8da532af58107d40d2cfacb5ffd4f794cbdc841ca40d5bcf8170c25d3447b9ee08297e51ee292c95d3b50c7c980c8574
SSDEEP 768:/z8qZpJgBZdv1c5thoByGZpX8keureunneuIqCTNU5tSwlBrh51:/HZpJgLcHh8yGZpPCRzwrhf
TLSH
T14C43F723B7CCD42EE4888AF5140EC3B625913E7901539E93B912BF06BE771A365B471B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118__285c8b50394d5c7147726e49596699b9.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3036	jaffacakes118__285c8b50394d5c7147726e49596699b9.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118__285c8b50394d5c7147726e49596699b9.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118__285c8b50394d5c7147726e49596699b9.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3036

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads