f5f03cafde20db01e1399f0dec4581a701fc135a7c7cc0f9bad7ddc2db465273

Analysis

max time kernel
148s
max time network
141s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/09/2026, 21:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118__274b20aeb25601d7ef28cf95a057c400.exe
Size 13KB
Sample260920-1jxeaaen2x
SHA256 f5f03cafde20db01e1399f0dec4581a701fc135a7c7cc0f9bad7ddc2db465273
MD5 274b20aeb25601d7ef28cf95a057c400
SHA1 dcfd376d59a3075d24d024477d2a874ac8e541e9
SHA512 0a4f6e1fa4f53204c16cac52844cf214ad3c75897ca79ad74c244dd4b8ec2537b11e047e350f9f2e8b4f0d3e5a8665114e6be51133b73a785accb5e27bc57047
SSDEEP 384:vlaysKTWcoHcEB+gSNVqNdtzd89KBGRyLD:dayDWlvIVqNx8EQwL
TLSH
T194529D3EBA0D06DEE05695724147296C01A6E9708B0F47CB3E603AC76DBA7407F79985
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/4668-0-0x0000000000400000-0x0000000000413000-memory.dmp	upx

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118__274b20aeb25601d7ef28cf95a057c400.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118__274b20aeb25601d7ef28cf95a057c400.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118__274b20aeb25601d7ef28cf95a057c400.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4668

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4668-0-0x0000000000400000-0x0000000000413000-memory.dmp

Download